ystore.tw

- Oath Holdings Inc. -

Issued by DigiCert SHA2 High Assurance Server CA

About this certificate

This digital certificate with serial number 04:18:82:d0:63:20:cd:e9:65:70:b6:fe:ab:6d:24:3f was issued on by DigiCert Inc.

With 90 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Oath Holdings Inc.

Organization: Oath Holdings Inc.
State / Province: California
Locality: Sunnyvale
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:18:82:d0:63:20:cd:e9:65:70:b6:fe:ab:6d:24:3f
Serial Number (int): 5444180331129451027908023541906089023
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 2d:10:8d:4f:52:24:9d:27:4d:f0:cd:4e:97:7d:96:0c:02:25:6b:57
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b

Fingerprint (sha1): 11:fe:93:9a:c6:7f:ea:46:e1:cb:a0:c8:db:e8:9a:db:4d:8b:af:c1
Fingerprint (sha256): 57:3f:ef:08:8c:9b:fe:7c:da:6d:bd:cd:a0:04:4e:e1:ce:db:d2:43:a6:91:5c:a6:7d:05:8f:a3:76:06:90:a9

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g6.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g6.crl

Check the revocation status for certificate ystore.tw

90

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ystore.tw

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ystore.tw
yshop.tw
ybid.tw
yahoo.com.tw
yahoo.com.hk
tw.ysm.emarketing.yahoo.com
tw.systex.finance.yahoo.net
tw.stockapp-string.finance.yahoo.net
tw.screener.finance.yahoo.net
tw.sales.emarketing.yahoo.com
tw.quote.finance.yahoo.net
tw.ptnr.yimg.com
tw.payment.charity.yahoo.com
tw.partner.buy.yahoo.com
tw.live.yahoo.com
tw.linkspot.search.yahoo.com
tw.esports.yahoo.com
tw.emarketing.yahoo.com
tw.edit.listing.yahoo.com
tw.edit.finance.yahoo.com
tw.campaign.money.yahoo.com
partner.pr.buy.yahoo.com.tw
hk.realestate.yahoo.net
hk.promotions.yahoo.net
hk.promotions.yahoo.com
hk.promotion.yahoo.net
hk.lifestyle.yahoo.net
hk.esports.yahoo.com
hk.emarketing.yahoo.net
hk.celebrity.yahoo.net
au.sports.yahoo.com
au.lifestyle.yahoo.com
*.youcard.yahoo.com
*.yimg.com
*.yahoo.com.tw
*.yahoo.com.hk
*.video.yahoo.com
*.user.mall.yahoo.com
*.usedcar.yahoo.com
*.tw.mall.yahoo.com
*.tw.campaign.yahoo.net
*.tw.campaign.yahoo.com
*.tw.buy.yahoo.com
*.tv.yahoo.com
*.trendr.yahoo.com
*.tns.nevec.yahoo.com
*.supplier.yahoo.com
*.stock.yahoo.com
*.smartr.yahoo.com
*.shp.yahoo.com
*.sc.mall.yahoo.com
*.rcv.mall.yahoo.com
*.promo.yahoo.com
*.promo.bid.yahoo.com
*.prime.yahoo.com
*.points.yahoo.com
*.paas.ec.yahoo.com
*.operate.buy.yahoo.com
*.news.yahoo.com
*.nevec.yahoo.com
*.money.yahoo.com
*.monday.com.tw
*.mobi.yahoo.com
*.merchant.yahoo.com
*.media.yahoo.com
*.mall.yahoo.com
*.makers.yahoo.com
*.m.tw.campaign.yahoo.net
*.ltm.buy.yahoo.com
*.livechat.yahoo.com
*.finance.yahoo.com
*.engadget.com
*.edmbc.mall.yahoo.com
*.ec.yahoo.com
*.cmp.shp.yahoo.com
*.cmp.p4pnet.net
*.charity.yahoo.com
*.campaign.yahoo.com.tw
*.campaign.yahoo.com.hk
*.campaign.bid.yahoo.com
*.buy.yahoo.com.tw
*.buy.yahoo.com
*.bid.yahoo.com
*.bc.yahoo.com.tw
*.bc.yahoo.com
*.api.udb.yahoo.com
*.analytics.mall.yahoo.com
*.analytics.buy.yahoo.com
*.analytics.bid.yahoo.com
*.abumedia.yahoo.com

Other certificates including the domain name ystore.tw

(limited to 100 certificates)
*.abumedia.yahoo.com
*.abumedia.yahoo.com
*.abumedia.yahoo.com
ystore.tw
*.abumedia.yahoo.com
*.abumedia.yahoo.com
yshop.tw
*.abumedia.yahoo.com
*.abumedia.yahoo.com
*.abumedia.yahoo.com
yshop.tw
ystore.tw
*.abumedia.yahoo.com
ystore.tw
ystore.tw
*.abumedia.yahoo.com
*.abumedia.yahoo.com
yshop.tw
yshop.tw
ystore.tw
*.abumedia.yahoo.com
*.yshop.tw
yshop.tw
*.abumedia.yahoo.com
ystore.tw
*.abumedia.yahoo.com
*.abumedia.yahoo.com
*.yshop.tw
ystore.tw
*.abumedia.yahoo.com
*.abumedia.yahoo.com
*.abumedia.yahoo.com
*.abumedia.yahoo.com
ystore.tw
ystore.tw
yshop.tw
yshop.tw
ystore.tw
ystore.tw
*.abumedia.yahoo.com
*.abumedia.yahoo.com
ystore.tw
ystore.tw
yshop.tw
*.abumedia.yahoo.com
ystore.tw
*.abumedia.yahoo.com
ystore.tw
ystore.tw
*.abumedia.yahoo.com
*.abumedia.yahoo.com
*.abumedia.yahoo.com
*.abumedia.yahoo.com
*.abumedia.yahoo.com
*.abumedia.yahoo.com
yshop.tw
*.abumedia.yahoo.com
*.abumedia.yahoo.com
*.abumedia.yahoo.com
*.abumedia.yahoo.com
yshop.tw
yshop.tw
*.abumedia.yahoo.com
ystore.tw
ystore.tw
yshop.tw
ystore.tw

Certificate

The complete raw certificate details for ystore.tw in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIM7TCCC9WgAwIBAgIQBBiC0GMgzellcLb+q20kPzANBgkqhkiG9w0BAQsFADBw
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMS8wLQYDVQQDEyZEaWdpQ2VydCBTSEEyIEhpZ2ggQXNz
dXJhbmNlIFNlcnZlciBDQTAeFw0yNDAyMTMwMDAwMDBaFw0yNDA4MDcyMzU5NTla
MGcxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpDYWxpZm9ybmlhMRIwEAYDVQQHEwlT
dW5ueXZhbGUxGzAZBgNVBAoTEk9hdGggSG9sZGluZ3MgSW5jLjESMBAGA1UEAxMJ
eXN0b3JlLnR3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6w5SnBFk
bt30AP3chJFoznxr+BDdUHwQpX+lsJaShEmrPT2zNEwwl297ic76OsZEUYcuVX1M
sVdrCNSlXPud/d/6BLAAFycfPQAas2hmSzR/JR5+H7sjiKR3gdEf+KiD9RuYHpjJ
637ITuk4EV+eBaRBuvne8T1Yy/hNM3I/aJS5oegDa7iEWltb/pQNvYfnJjqRwkwh
Lh5N434ajT9PVTkwSxMX+o+HhokkUvWaruRp7qnzs9SshtYhhJoId1LtuspzSyg3
Ywi38KHLok4vp6joerZQP6LWiKaqxx6wLek7vLS1UZ6cNtB3CQrwRH/3DJ/zveTx
5G2ZfHzXCZbKBwIDAQABo4IJijCCCYYwHwYDVR0jBBgwFoAUUWj/kK8CB3U8zNll
ZGKiErhZcjswHQYDVR0OBBYEFC0QjU9SJJ0nTfDNTpd9lgwCJWtXMIIHswYDVR0R
BIIHqjCCB6aCCXlzdG9yZS50d4IIeXNob3AudHeCB3liaWQudHeCDHlhaG9vLmNv
bS50d4IMeWFob28uY29tLmhrght0dy55c20uZW1hcmtldGluZy55YWhvby5jb22C
G3R3LnN5c3RleC5maW5hbmNlLnlhaG9vLm5ldIIkdHcuc3RvY2thcHAtc3RyaW5n
LmZpbmFuY2UueWFob28ubmV0gh10dy5zY3JlZW5lci5maW5hbmNlLnlhaG9vLm5l
dIIddHcuc2FsZXMuZW1hcmtldGluZy55YWhvby5jb22CGnR3LnF1b3RlLmZpbmFu
Y2UueWFob28ubmV0ghB0dy5wdG5yLnlpbWcuY29tghx0dy5wYXltZW50LmNoYXJp
dHkueWFob28uY29tghh0dy5wYXJ0bmVyLmJ1eS55YWhvby5jb22CEXR3LmxpdmUu
eWFob28uY29tghx0dy5saW5rc3BvdC5zZWFyY2gueWFob28uY29tghR0dy5lc3Bv
cnRzLnlhaG9vLmNvbYIXdHcuZW1hcmtldGluZy55YWhvby5jb22CGXR3LmVkaXQu
bGlzdGluZy55YWhvby5jb22CGXR3LmVkaXQuZmluYW5jZS55YWhvby5jb22CG3R3
LmNhbXBhaWduLm1vbmV5LnlhaG9vLmNvbYIbcGFydG5lci5wci5idXkueWFob28u
Y29tLnR3ghdoay5yZWFsZXN0YXRlLnlhaG9vLm5ldIIXaGsucHJvbW90aW9ucy55
YWhvby5uZXSCF2hrLnByb21vdGlvbnMueWFob28uY29tghZoay5wcm9tb3Rpb24u
eWFob28ubmV0ghZoay5saWZlc3R5bGUueWFob28ubmV0ghRoay5lc3BvcnRzLnlh
aG9vLmNvbYIXaGsuZW1hcmtldGluZy55YWhvby5uZXSCFmhrLmNlbGVicml0eS55
YWhvby5uZXSCE2F1LnNwb3J0cy55YWhvby5jb22CFmF1LmxpZmVzdHlsZS55YWhv
by5jb22CEyoueW91Y2FyZC55YWhvby5jb22CCioueWltZy5jb22CDioueWFob28u
Y29tLnR3gg4qLnlhaG9vLmNvbS5oa4IRKi52aWRlby55YWhvby5jb22CFSoudXNl
ci5tYWxsLnlhaG9vLmNvbYITKi51c2VkY2FyLnlhaG9vLmNvbYITKi50dy5tYWxs
LnlhaG9vLmNvbYIXKi50dy5jYW1wYWlnbi55YWhvby5uZXSCFyoudHcuY2FtcGFp
Z24ueWFob28uY29tghIqLnR3LmJ1eS55YWhvby5jb22CDioudHYueWFob28uY29t
ghIqLnRyZW5kci55YWhvby5jb22CFSoudG5zLm5ldmVjLnlhaG9vLmNvbYIUKi5z
dXBwbGllci55YWhvby5jb22CESouc3RvY2sueWFob28uY29tghIqLnNtYXJ0ci55
YWhvby5jb22CDyouc2hwLnlhaG9vLmNvbYITKi5zYy5tYWxsLnlhaG9vLmNvbYIU
Ki5yY3YubWFsbC55YWhvby5jb22CESoucHJvbW8ueWFob28uY29tghUqLnByb21v
LmJpZC55YWhvby5jb22CESoucHJpbWUueWFob28uY29tghIqLnBvaW50cy55YWhv
by5jb22CEyoucGFhcy5lYy55YWhvby5jb22CFyoub3BlcmF0ZS5idXkueWFob28u
Y29tghAqLm5ld3MueWFob28uY29tghEqLm5ldmVjLnlhaG9vLmNvbYIRKi5tb25l
eS55YWhvby5jb22CDyoubW9uZGF5LmNvbS50d4IQKi5tb2JpLnlhaG9vLmNvbYIU
Ki5tZXJjaGFudC55YWhvby5jb22CESoubWVkaWEueWFob28uY29tghAqLm1hbGwu
eWFob28uY29tghIqLm1ha2Vycy55YWhvby5jb22CGSoubS50dy5jYW1wYWlnbi55
YWhvby5uZXSCEyoubHRtLmJ1eS55YWhvby5jb22CFCoubGl2ZWNoYXQueWFob28u
Y29tghMqLmZpbmFuY2UueWFob28uY29tgg4qLmVuZ2FkZ2V0LmNvbYIWKi5lZG1i
Yy5tYWxsLnlhaG9vLmNvbYIOKi5lYy55YWhvby5jb22CEyouY21wLnNocC55YWhv
by5jb22CECouY21wLnA0cG5ldC5uZXSCEyouY2hhcml0eS55YWhvby5jb22CFyou
Y2FtcGFpZ24ueWFob28uY29tLnR3ghcqLmNhbXBhaWduLnlhaG9vLmNvbS5oa4IY
Ki5jYW1wYWlnbi5iaWQueWFob28uY29tghIqLmJ1eS55YWhvby5jb20udHeCDyou
YnV5LnlhaG9vLmNvbYIPKi5iaWQueWFob28uY29tghEqLmJjLnlhaG9vLmNvbS50
d4IOKi5iYy55YWhvby5jb22CEyouYXBpLnVkYi55YWhvby5jb22CGiouYW5hbHl0
aWNzLm1hbGwueWFob28uY29tghkqLmFuYWx5dGljcy5idXkueWFob28uY29tghkq
LmFuYWx5dGljcy5iaWQueWFob28uY29tghQqLmFidW1lZGlhLnlhaG9vLmNvbTA+
BgNVHSAENzA1MDMGBmeBDAECAjApMCcGCCsGAQUFBwIBFhtodHRwOi8vd3d3LmRp
Z2ljZXJ0LmNvbS9DUFMwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUF
BwMBBggrBgEFBQcDAjB1BgNVHR8EbjBsMDSgMqAwhi5odHRwOi8vY3JsMy5kaWdp
Y2VydC5jb20vc2hhMi1oYS1zZXJ2ZXItZzYuY3JsMDSgMqAwhi5odHRwOi8vY3Js
NC5kaWdpY2VydC5jb20vc2hhMi1oYS1zZXJ2ZXItZzYuY3JsMIGDBggrBgEFBQcB
AQR3MHUwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmRpZ2ljZXJ0LmNvbTBNBggr
BgEFBQcwAoZBaHR0cDovL2NhY2VydHMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0U0hB
MkhpZ2hBc3N1cmFuY2VTZXJ2ZXJDQS5jcnQwDAYDVR0TAQH/BAIwADATBgorBgEE
AdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo1y6HymI4UqCwpobZlCE
4aY06UynW8edtvRkxfHPq6tp23cU0lHgF1mDAT4/gnSfa75ja0TPN+ns8LsqwoxU
GMjZTK3Cuco4loF+/3lwMdsDMXs58GOnccK+1zMeTEkt9cc0/2scDfUU9mjocidu
UEOblstwGzEqgUKeJcMKd16AB++DU3Qffwrc75ihyTQh08pa4KaSJlNzRVebR6HR
/DgrFszSg7kY6Ien+Deaklom0o7eLHCAG4nX9DvaufLfkusRmikM6/CzsFVhSsS0
S4lO8v5rbYnGKcoqjJK7U58j+YDPW0sjg0zDLcfypRYYOpfmY8VNIkqNOMvpu+jJ
8A==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6w5SnBFkbt30AP3chJFo
znxr+BDdUHwQpX+lsJaShEmrPT2zNEwwl297ic76OsZEUYcuVX1MsVdrCNSlXPud
/d/6BLAAFycfPQAas2hmSzR/JR5+H7sjiKR3gdEf+KiD9RuYHpjJ637ITuk4EV+e
BaRBuvne8T1Yy/hNM3I/aJS5oegDa7iEWltb/pQNvYfnJjqRwkwhLh5N434ajT9P
VTkwSxMX+o+HhokkUvWaruRp7qnzs9SshtYhhJoId1LtuspzSyg3Ywi38KHLok4v
p6joerZQP6LWiKaqxx6wLek7vLS1UZ6cNtB3CQrwRH/3DJ/zveTx5G2ZfHzXCZbK
BwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5444180331129451027908023541906089023
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-07 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sunnyvale'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Oath Holdings Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ystore.tw'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29673064450623240641849805800697854846045169184990788591607056121478506002612894331058822678969436205244256983395093713622157721696866593541582907329688174019912072290733193940909027690182757404608221386231206003902239368164637676063087650545155425559454770724418198797349765590121330595983332521871363029088407526213837147202432433106396360885709699002097163424360052350312575983234484235458896662208215880535622992697006217760060618199260585162465914477085749386044229782981600128734851722728497779998731414303041191220704579998359225871712077696896546286470553422070668489501238359110512301972594010208345093753351
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2d108d4f52249d274df0cd4e977d960c02256b57
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1962 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ystore.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yshop.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ybid.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yahoo.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yahoo.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tw.ysm.emarketing.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tw.systex.finance.yahoo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tw.stockapp-string.finance.yahoo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tw.screener.finance.yahoo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tw.sales.emarketing.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tw.quote.finance.yahoo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tw.ptnr.yimg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tw.payment.charity.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tw.partner.buy.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tw.live.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tw.linkspot.search.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tw.esports.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tw.emarketing.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tw.edit.listing.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tw.edit.finance.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tw.campaign.money.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partner.pr.buy.yahoo.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hk.realestate.yahoo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hk.promotions.yahoo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hk.promotions.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hk.promotion.yahoo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hk.lifestyle.yahoo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hk.esports.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hk.emarketing.yahoo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hk.celebrity.yahoo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'au.sports.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'au.lifestyle.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.youcard.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yimg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yahoo.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yahoo.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.video.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.user.mall.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.usedcar.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tw.mall.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tw.campaign.yahoo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tw.campaign.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tw.buy.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tv.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.trendr.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tns.nevec.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.supplier.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stock.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.smartr.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shp.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sc.mall.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rcv.mall.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.promo.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.promo.bid.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prime.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.points.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.paas.ec.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.operate.buy.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.news.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nevec.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.money.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.monday.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mobi.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.merchant.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.media.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mall.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.makers.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.m.tw.campaign.yahoo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ltm.buy.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.livechat.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.finance.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.engadget.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.edmbc.mall.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ec.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cmp.shp.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cmp.p4pnet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.charity.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.campaign.yahoo.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.campaign.yahoo.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.campaign.bid.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.buy.yahoo.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.buy.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bid.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bc.yahoo.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bc.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.udb.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.analytics.mall.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.analytics.buy.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.analytics.bid.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.abumedia.yahoo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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