*.opx.janrain.ws

- JanRain, Inc. -

Issued by DigiCert SHA2 High Assurance Server CA

About this certificate

This digital certificate with serial number 05:d5:3d:e6:ba:ea:ff:d5:44:83:e9:e4:40:64:c1:16 was issued on by DigiCert Inc.

With 32 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

JanRain, Inc.

Organization: JanRain, Inc.
Organization unit: Operations
State / Province: Oregon
Locality: Portland
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 05:d5:3d:e6:ba:ea:ff:d5:44:83:e9:e4:40:64:c1:16
Serial Number (int): 7753354717104007288196210569387491606
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: f0:65:a3:d3:56:5a:e9:bb:90:c0:e2:4e:aa:84:75:33:b1:5c:a5:42
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b

Fingerprint (sha1): 0b:71:3d:fe:d7:de:fd:25:89:87:db:2e:ac:df:b4:ea:91:89:8c:18
Fingerprint (sha256): 5b:33:30:51:9c:a2:2c:3c:67:2a:4f:82:39:6f:c6:9f:bc:0e:e7:fc:7e:7a:fd:b4:2e:27:6d:05:18:99:f6:0e

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g6.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g6.crl

Check the revocation status for certificate *.opx.janrain.ws

32

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.opx.janrain.ws

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.opx.janrain.ws
opx.janrain.ws
*.eval.janrainfederate.com
*.janrainfederate.com
eval.janrainfederate.com
janrainfederate.com
uc11.janrainfederate.com
eopenid.intel.com
eopenid.gianteagle.com
eopenid-pre.intel.com
federatesso.telstra.com
openid.api.stjude.org
cue.api.stjude.org
idp.idecosystem.org
nsticid.opx.janrain.ws
openid.pfizer.com
openid-auth.luxsci.com
openid.bizjournals.com
openid.foxnews.com
openid.yellowpages.ca
sso.lifeway.com
opx1.janrainfederate.com
openid-identity-net.production.janrainfederate.com
eopenid-intel.uc11.janrainfederate.com
openid-api-stjude-org.uc11.janrainfederate.com
pfizer.uc11.janrainfederate.com
telstra.uc11.janrainfederate.com
cue-api-stjude-org-dev.janrainfederate.com
intel-dev.janrainfederate.com
monitor.janrainfederate.com
opx-test.janrain.com
telstra-dev.janrainfederate.com

Other certificates including the domain name janrain.ws

(limited to 100 certificates)
truelocal.client.janrain.com
visiple.client.janrain.com
findmeoutside.client.janrain.com
sanoma.client.janrain.com
ccna.client.janrain.com
542digital.client.janrain.com
enthusiastnetwork.client.janrain.com
*.opx.janrain.ws
*.opx.janrain.ws
mediaqmi.client.janrain.com
adoptapet.client.janrain.com
scholastic.client.janrain.com
oreilly.janrain.com
newton-software.client.janrain.com
*.opx.janrain.ws
mris.client.janrain.com
hillsvet.client.janrain.com
cnhi.client.janrain.com
slate.client.janrain.com
surfstitch.client.janrain.com
accounts.oreilly.com
usta.cleint.janrain.com
strategyand.client.janrain.com
aia.client.janrain.com
Bosch.client.janrain.com
guitarcenter.client.janrain.com
ccna.client.janrain.com
Bosch.client.janrain.com
nestleusa.client.janrain.com
scholastic.client.janrain.com
salesforce.client.janrain.com
mediaqmi.client.janrain.com
adoptapet.client.janrain.com
theatlantic.client.janrain.com
login.france24.com
docusign.client.janrain.com
eatclean.client.janrain.com
visiple.client.janrain.com
surfstitch.client.janrain.com
auth.edocr.com
mris.client.janrain.com
consumerist.client.janrain.com
Bosch.client.janrain.com
adoptapet.client.janrain.com
mediaqmi.client.janrain.com
oreilly.janrain.com
flight-centre.client.janrain.com
wawanesa.client.janrain.com
biscience.client.janrain.com
sanoma.client.janrain.com
enthusiastnetwork.client.janrain.com
nestleusa.client.janrain.com
*.opx.janrain.ws
mris.client.janrain.com
ccna.client.janrain.com
oncourselearning.client.janrain.com
iselect.client.janrain.com
adoptapet.client.janrain.com
*.opx.janrain.ws
srf.client.janrain.com
salesforce.client.janrain.com
newton-software.client.janrain.com
salesforce.client.janrain.com
ksfmedia.client.janrain.com
wingtai.client.janrain.com
melbournestorm.client.janrain.com
adoptapet.client.janrain.com
accounts.oreilly.com
atkearney.client.janrain.com
hillsvet.client.janrain.com
srf.client.janrain.com
salesforce.client.janrain.com
*.janrainfederate.com
aia.client.janrain.com
consumerist.client.janrain.com
nvidia.client.janrain.com
truelocal.client.janrain.com
cavs.client.janrain.com
mtg.client.janrain.com
*.opx.janrain.ws
*.opx.janrain.ws
usatoday.client.janrain.com
*.opx.janrain.ws
docusign.client.janrain.com
mediaqmi.client.janrain.com
findmeoutside.client.janrain.com
scholastic.client.janrain.com
cavs.client.janrain.com
Bosch.client.janrain.com
docusign.client.janrain.com
*.opx.janrain.ws
atkearney.client.janrain.com
koss.client.janrain.com
auth.edocr.com
salesforce.client.janrain.com
ccna.client.janrain.com
rtbf.client.janrain.com
ksfmedia.client.janrain.com
authenticate.globe.com.ph
authenticate.globe.com.ph

Certificate

The complete raw certificate details for *.opx.janrain.ws in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIJsTCCCJmgAwIBAgIQBdU95rrq/9VEg+nkQGTBFjANBgkqhkiG9w0BAQsFADBw
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMS8wLQYDVQQDEyZEaWdpQ2VydCBTSEEyIEhpZ2ggQXNz
dXJhbmNlIFNlcnZlciBDQTAeFw0xODA2MjUwMDAwMDBaFw0xOTA4MDcxMjAwMDBa
MHkxCzAJBgNVBAYTAlVTMQ8wDQYDVQQIEwZPcmVnb24xETAPBgNVBAcTCFBvcnRs
YW5kMRYwFAYDVQQKEw1KYW5SYWluLCBJbmMuMRMwEQYDVQQLEwpPcGVyYXRpb25z
MRkwFwYDVQQDDBAqLm9weC5qYW5yYWluLndzMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAunhB4cY4vSE4ELCXDp39WKfVu2B5gf5xNPaSqLXrg7u9gZ2Y
6vCxPQpWYsWM/giw2AHXY0GmNAxmjh1YqtQ1TxaXs8jDQEslsBTVeQF65cOqqZ1a
ZaaX+qz2kEsS7O/2vblo9ZIXJ7pLY0Nz3SQ9ofpJeaomm1qe/TrVlz/6MQWYc2eY
cL6TiJ9iqhBwt/V+/k+5GZ3wOje/KuXN732/Mn8C3IwLvkpkF9FI4g6JG10XWEbD
t7nb1JSreZ/Drw4HinS/QpGAhIiB3Tr6rbFOkizSkfMYwpF6yn/FogJjek8Qoc75
a1sywFzS6ovYbT5eFCMLdDK64Z8yn+2093DXfwIDAQABo4IGPDCCBjgwHwYDVR0j
BBgwFoAUUWj/kK8CB3U8zNllZGKiErhZcjswHQYDVR0OBBYEFPBlo9NWWum7kMDi
TqqEdTOxXKVCMIIDZQYDVR0RBIIDXDCCA1iCECoub3B4LmphbnJhaW4ud3OCDm9w
eC5qYW5yYWluLndzghoqLmV2YWwuamFucmFpbmZlZGVyYXRlLmNvbYIVKi5qYW5y
YWluZmVkZXJhdGUuY29tghhldmFsLmphbnJhaW5mZWRlcmF0ZS5jb22CE2phbnJh
aW5mZWRlcmF0ZS5jb22CGHVjMTEuamFucmFpbmZlZGVyYXRlLmNvbYIRZW9wZW5p
ZC5pbnRlbC5jb22CFmVvcGVuaWQuZ2lhbnRlYWdsZS5jb22CFWVvcGVuaWQtcHJl
LmludGVsLmNvbYIXZmVkZXJhdGVzc28udGVsc3RyYS5jb22CFW9wZW5pZC5hcGku
c3RqdWRlLm9yZ4ISY3VlLmFwaS5zdGp1ZGUub3JnghNpZHAuaWRlY29zeXN0ZW0u
b3JnghZuc3RpY2lkLm9weC5qYW5yYWluLndzghFvcGVuaWQucGZpemVyLmNvbYIW
b3BlbmlkLWF1dGgubHV4c2NpLmNvbYIWb3BlbmlkLmJpempvdXJuYWxzLmNvbYIS
b3BlbmlkLmZveG5ld3MuY29tghVvcGVuaWQueWVsbG93cGFnZXMuY2GCD3Nzby5s
aWZld2F5LmNvbYIYb3B4MS5qYW5yYWluZmVkZXJhdGUuY29tgjJvcGVuaWQtaWRl
bnRpdHktbmV0LnByb2R1Y3Rpb24uamFucmFpbmZlZGVyYXRlLmNvbYImZW9wZW5p
ZC1pbnRlbC51YzExLmphbnJhaW5mZWRlcmF0ZS5jb22CLm9wZW5pZC1hcGktc3Rq
dWRlLW9yZy51YzExLmphbnJhaW5mZWRlcmF0ZS5jb22CH3BmaXplci51YzExLmph
bnJhaW5mZWRlcmF0ZS5jb22CIHRlbHN0cmEudWMxMS5qYW5yYWluZmVkZXJhdGUu
Y29tgipjdWUtYXBpLXN0anVkZS1vcmctZGV2LmphbnJhaW5mZWRlcmF0ZS5jb22C
HWludGVsLWRldi5qYW5yYWluZmVkZXJhdGUuY29tghttb25pdG9yLmphbnJhaW5m
ZWRlcmF0ZS5jb22CFG9weC10ZXN0LmphbnJhaW4uY29tgh90ZWxzdHJhLWRldi5q
YW5yYWluZmVkZXJhdGUuY29tMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggr
BgEFBQcDAQYIKwYBBQUHAwIwdQYDVR0fBG4wbDA0oDKgMIYuaHR0cDovL2NybDMu
ZGlnaWNlcnQuY29tL3NoYTItaGEtc2VydmVyLWc2LmNybDA0oDKgMIYuaHR0cDov
L2NybDQuZGlnaWNlcnQuY29tL3NoYTItaGEtc2VydmVyLWc2LmNybDBMBgNVHSAE
RTBDMDcGCWCGSAGG/WwBATAqMCgGCCsGAQUFBwIBFhxodHRwczovL3d3dy5kaWdp
Y2VydC5jb20vQ1BTMAgGBmeBDAECAjCBgwYIKwYBBQUHAQEEdzB1MCQGCCsGAQUF
BzABhhhodHRwOi8vb2NzcC5kaWdpY2VydC5jb20wTQYIKwYBBQUHMAKGQWh0dHA6
Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydFNIQTJIaWdoQXNzdXJhbmNl
U2VydmVyQ0EuY3J0MAwGA1UdEwEB/wQCMAAwggEDBgorBgEEAdZ5AgQCBIH0BIHx
AO8AdgC72d+8H4pxtZOUI5eqkntHOFeVCqtS6BqQlmQ2jh7RhQAAAWQ2mNXEAAAE
AwBHMEUCIGgRZgRM8viyxzyzcR8EVpticc8oFb/ezob+X8lvE/WfAiEAmpxqWv1k
5I/c2zm9LPL561IiU/DccC5cwH+j26cOto4AdQCHdb/nWXz4jEOZX73zbv9WjUdW
Nv9KtWDBtOr/XqCDDwAAAWQ2mNW0AAAEAwBGMEQCICmj7xXCdKaZmKTazMfliKJE
JUD82xfs9GE3jwWoyhQJAiA68mk7pTrn2UzzBtl3QlT29klxkGeoesAFBM9TwKCq
xTANBgkqhkiG9w0BAQsFAAOCAQEABi4Mu+9I4RDvEoF90gPXIXSkUVBM9G24f6ZM
eKNqz4jZp1dexhmJnBVBZttLZHK9y/rZbic86w42zVW7K1frU8jRgrURlnt9Prxr
LQ0lEhpBCg55Yw6oKEFSZVgvotZoZYvdlTyIVkP/F3HMO8iOFgEkbrZkkbtH4j/W
xIFE9ltk5Mr1BTo9e2HBnqllRRB0aSlthnTpta7I9m/K75f8tnWkJvMS3OTwaZrR
EDogmS4S9vgDvjiSw3//Rz69ub/eZaJer0jmI/2wUjjgjB6Qtb+BukmH9qnJPyd+
k1qcldJUqtYcHAe95Y8dekqnWSkENfjrfHrKd0Dk9BkDb1w7kA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunhB4cY4vSE4ELCXDp39
WKfVu2B5gf5xNPaSqLXrg7u9gZ2Y6vCxPQpWYsWM/giw2AHXY0GmNAxmjh1YqtQ1
TxaXs8jDQEslsBTVeQF65cOqqZ1aZaaX+qz2kEsS7O/2vblo9ZIXJ7pLY0Nz3SQ9
ofpJeaomm1qe/TrVlz/6MQWYc2eYcL6TiJ9iqhBwt/V+/k+5GZ3wOje/KuXN732/
Mn8C3IwLvkpkF9FI4g6JG10XWEbDt7nb1JSreZ/Drw4HinS/QpGAhIiB3Tr6rbFO
kizSkfMYwpF6yn/FogJjek8Qoc75a1sywFzS6ovYbT5eFCMLdDK64Z8yn+2093DX
fwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7753354717104007288196210569387491606
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-25 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-07 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Oregon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Portland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JanRain, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Operations'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.opx.janrain.ws'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23539625833791861468609590582071470806564836950578259800405068327786426289702668376505870468743019207013701018763705797799738120631510721963767568737791311374919058657909418230735375903274363357694943300256259060351112658117963357901974732042130249789064093643738034400195036109875392462598644895140678288146732066987258560142467350359005135418671606235282413048306546093192235482994049583626347719109707881284251686093231922188661124407980559388089357454948653092958011608604630004341126224220588955519974985849122106940372416262240065232867061275864953452691141114769654659574861073174409571790010631717659029329791
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f065a3d3565ae9bb90c0e24eaa847533b15ca542
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (860 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.opx.janrain.ws'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opx.janrain.ws'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eval.janrainfederate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.janrainfederate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eval.janrainfederate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'janrainfederate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uc11.janrainfederate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eopenid.intel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eopenid.gianteagle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eopenid-pre.intel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'federatesso.telstra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'openid.api.stjude.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cue.api.stjude.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idp.idecosystem.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nsticid.opx.janrain.ws'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'openid.pfizer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'openid-auth.luxsci.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'openid.bizjournals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'openid.foxnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'openid.yellowpages.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sso.lifeway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opx1.janrainfederate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'openid-identity-net.production.janrainfederate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eopenid-intel.uc11.janrainfederate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'openid-api-stjude-org.uc11.janrainfederate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pfizer.uc11.janrainfederate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'telstra.uc11.janrainfederate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cue-api-stjude-org-dev.janrainfederate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intel-dev.janrainfederate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monitor.janrainfederate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opx-test.janrain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'telstra-dev.janrainfederate.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed185000001643698d5c400000403004730450220681166044cf2f8b2c73cb3711f04569b6271cf2815bfdece86fe5fc96f13f59f0221009a9c6a5afd64e48fdcdb39bd2cf2f9eb522253f0dc702e5cc07fa3dba70eb68e0075008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f000001643698d5b40000040300463044022029a3ef15c274a69998a4daccc7e588a2442540fcdb17ecf461378f05a8ca140902203af2693ba53ae7d94cf306d9774254f6f649719067a87ac00504cf53c0a0aac5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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