ystore.tw

- Oath Holdings Inc. -

Issued by DigiCert SHA2 High Assurance Server CA

About this certificate

This digital certificate with serial number 09:48:77:67:7b:00:19:b1:6e:36:83:03:a0:46:3a:5c was issued on by DigiCert Inc.

With 90 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Oath Holdings Inc.

Organization: Oath Holdings Inc.
State / Province: California
Locality: Sunnyvale
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 09:48:77:67:7b:00:19:b1:6e:36:83:03:a0:46:3a:5c
Serial Number (int): 12339319141189101503598576421537462876
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 02:33:9f:47:7a:28:aa:f0:9e:a6:fa:7d:13:ba:ca:ac:e5:42:e1:5f
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b

Fingerprint (sha1): 1a:46:6a:7d:89:64:53:c1:dd:ee:1c:c8:e4:a0:f2:f8:3c:62:a7:d8
Fingerprint (sha256): 7a:86:bf:3d:06:5a:ff:7b:03:c7:db:b0:98:b9:86:25:ca:96:bf:3b:8b:50:b8:fe:c4:a5:70:08:3f:54:da:2b

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g6.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g6.crl

Check the revocation status for certificate ystore.tw

90

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ystore.tw

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ystore.tw
yshop.tw
ybid.tw
yahoo.com.tw
yahoo.com.hk
tw.ysm.emarketing.yahoo.com
tw.systex.finance.yahoo.net
tw.stockapp-string.finance.yahoo.net
tw.screener.finance.yahoo.net
tw.sales.emarketing.yahoo.com
tw.quote.finance.yahoo.net
tw.ptnr.yimg.com
tw.payment.charity.yahoo.com
tw.partner.buy.yahoo.com
tw.live.yahoo.com
tw.linkspot.search.yahoo.com
tw.esports.yahoo.com
tw.emarketing.yahoo.com
tw.edit.listing.yahoo.com
tw.edit.finance.yahoo.com
tw.campaign.money.yahoo.com
partner.pr.buy.yahoo.com.tw
hk.realestate.yahoo.net
hk.promotions.yahoo.net
hk.promotions.yahoo.com
hk.promotion.yahoo.net
hk.lifestyle.yahoo.net
hk.esports.yahoo.com
hk.emarketing.yahoo.net
hk.celebrity.yahoo.net
au.sports.yahoo.com
au.lifestyle.yahoo.com
*.youcard.yahoo.com
*.yimg.com
*.yahoo.com.tw
*.yahoo.com.hk
*.video.yahoo.com
*.user.mall.yahoo.com
*.usedcar.yahoo.com
*.tw.mall.yahoo.com
*.tw.campaign.yahoo.net
*.tw.campaign.yahoo.com
*.tw.buy.yahoo.com
*.tv.yahoo.com
*.trendr.yahoo.com
*.tns.nevec.yahoo.com
*.supplier.yahoo.com
*.stock.yahoo.com
*.smartr.yahoo.com
*.shp.yahoo.com
*.sc.mall.yahoo.com
*.rcv.mall.yahoo.com
*.promo.yahoo.com
*.promo.bid.yahoo.com
*.prime.yahoo.com
*.points.yahoo.com
*.paas.ec.yahoo.com
*.operate.buy.yahoo.com
*.news.yahoo.com
*.nevec.yahoo.com
*.money.yahoo.com
*.monday.com.tw
*.mobi.yahoo.com
*.merchant.yahoo.com
*.media.yahoo.com
*.mall.yahoo.com
*.makers.yahoo.com
*.m.tw.campaign.yahoo.net
*.ltm.buy.yahoo.com
*.livechat.yahoo.com
*.finance.yahoo.com
*.engadget.com
*.edmbc.mall.yahoo.com
*.ec.yahoo.com
*.cmp.shp.yahoo.com
*.cmp.p4pnet.net
*.charity.yahoo.com
*.campaign.yahoo.com.tw
*.campaign.yahoo.com.hk
*.campaign.bid.yahoo.com
*.buy.yahoo.com.tw
*.buy.yahoo.com
*.bid.yahoo.com
*.bc.yahoo.com.tw
*.bc.yahoo.com
*.api.udb.yahoo.com
*.analytics.mall.yahoo.com
*.analytics.buy.yahoo.com
*.analytics.bid.yahoo.com
*.abumedia.yahoo.com

Other certificates including the domain name ystore.tw

(limited to 100 certificates)
*.abumedia.yahoo.com
*.abumedia.yahoo.com
*.abumedia.yahoo.com
ystore.tw
*.abumedia.yahoo.com
*.abumedia.yahoo.com
yshop.tw
*.abumedia.yahoo.com
*.abumedia.yahoo.com
*.abumedia.yahoo.com
yshop.tw
ystore.tw
*.abumedia.yahoo.com
ystore.tw
ystore.tw
*.abumedia.yahoo.com
*.abumedia.yahoo.com
yshop.tw
yshop.tw
ystore.tw
*.abumedia.yahoo.com
*.yshop.tw
yshop.tw
*.abumedia.yahoo.com
ystore.tw
*.abumedia.yahoo.com
*.abumedia.yahoo.com
*.yshop.tw
ystore.tw
*.abumedia.yahoo.com
*.abumedia.yahoo.com
*.abumedia.yahoo.com
*.abumedia.yahoo.com
ystore.tw
ystore.tw
yshop.tw
yshop.tw
ystore.tw
ystore.tw
*.abumedia.yahoo.com
*.abumedia.yahoo.com
ystore.tw
ystore.tw
yshop.tw
*.abumedia.yahoo.com
ystore.tw
*.abumedia.yahoo.com
ystore.tw
ystore.tw
*.abumedia.yahoo.com
*.abumedia.yahoo.com
*.abumedia.yahoo.com
*.abumedia.yahoo.com
*.abumedia.yahoo.com
*.abumedia.yahoo.com
yshop.tw
*.abumedia.yahoo.com
*.abumedia.yahoo.com
*.abumedia.yahoo.com
*.abumedia.yahoo.com
yshop.tw
yshop.tw
*.abumedia.yahoo.com
ystore.tw
ystore.tw
yshop.tw
ystore.tw

Certificate

The complete raw certificate details for ystore.tw in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIM7TCCC9WgAwIBAgIQCUh3Z3sAGbFuNoMDoEY6XDANBgkqhkiG9w0BAQsFADBw
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMS8wLQYDVQQDEyZEaWdpQ2VydCBTSEEyIEhpZ2ggQXNz
dXJhbmNlIFNlcnZlciBDQTAeFw0yMzA5MTkwMDAwMDBaFw0yNDAzMTMyMzU5NTla
MGcxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpDYWxpZm9ybmlhMRIwEAYDVQQHEwlT
dW5ueXZhbGUxGzAZBgNVBAoTEk9hdGggSG9sZGluZ3MgSW5jLjESMBAGA1UEAxMJ
eXN0b3JlLnR3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkO0962Up
TrXVCquJ/zStovO9EDhF8nOWqtw0ae2jMDYQZYSsqWClEaZ0AlMxSqmfUtaffSiF
rzvM84HnvEjQaxsloRnuD2x5tZg1V1NDuBfXnfDiStIF4/nzRyibhqA0XTttsX6x
0mBIhVEkpI76jFhpmLj4tJ9M1ikBlLY7101jnur2iiEWa+Yh9qz65/6fWpYZRk83
9BiBNDocIxadfCscpLHicY/NRK2rDiJKgDf5tQcjS7WolsOLPm/0wAlcvmKIVLg6
s6zVs6Ib209YrPGyeHmRktRFjG4Uod+dVzlxqkjQ5CHdmgTqyJguukosyySmrfdd
A+UL/kkDJF7/UQIDAQABo4IJijCCCYYwHwYDVR0jBBgwFoAUUWj/kK8CB3U8zNll
ZGKiErhZcjswHQYDVR0OBBYEFAIzn0d6KKrwnqb6fRO6yqzlQuFfMIIHswYDVR0R
BIIHqjCCB6aCCXlzdG9yZS50d4IIeXNob3AudHeCB3liaWQudHeCDHlhaG9vLmNv
bS50d4IMeWFob28uY29tLmhrght0dy55c20uZW1hcmtldGluZy55YWhvby5jb22C
G3R3LnN5c3RleC5maW5hbmNlLnlhaG9vLm5ldIIkdHcuc3RvY2thcHAtc3RyaW5n
LmZpbmFuY2UueWFob28ubmV0gh10dy5zY3JlZW5lci5maW5hbmNlLnlhaG9vLm5l
dIIddHcuc2FsZXMuZW1hcmtldGluZy55YWhvby5jb22CGnR3LnF1b3RlLmZpbmFu
Y2UueWFob28ubmV0ghB0dy5wdG5yLnlpbWcuY29tghx0dy5wYXltZW50LmNoYXJp
dHkueWFob28uY29tghh0dy5wYXJ0bmVyLmJ1eS55YWhvby5jb22CEXR3LmxpdmUu
eWFob28uY29tghx0dy5saW5rc3BvdC5zZWFyY2gueWFob28uY29tghR0dy5lc3Bv
cnRzLnlhaG9vLmNvbYIXdHcuZW1hcmtldGluZy55YWhvby5jb22CGXR3LmVkaXQu
bGlzdGluZy55YWhvby5jb22CGXR3LmVkaXQuZmluYW5jZS55YWhvby5jb22CG3R3
LmNhbXBhaWduLm1vbmV5LnlhaG9vLmNvbYIbcGFydG5lci5wci5idXkueWFob28u
Y29tLnR3ghdoay5yZWFsZXN0YXRlLnlhaG9vLm5ldIIXaGsucHJvbW90aW9ucy55
YWhvby5uZXSCF2hrLnByb21vdGlvbnMueWFob28uY29tghZoay5wcm9tb3Rpb24u
eWFob28ubmV0ghZoay5saWZlc3R5bGUueWFob28ubmV0ghRoay5lc3BvcnRzLnlh
aG9vLmNvbYIXaGsuZW1hcmtldGluZy55YWhvby5uZXSCFmhrLmNlbGVicml0eS55
YWhvby5uZXSCE2F1LnNwb3J0cy55YWhvby5jb22CFmF1LmxpZmVzdHlsZS55YWhv
by5jb22CEyoueW91Y2FyZC55YWhvby5jb22CCioueWltZy5jb22CDioueWFob28u
Y29tLnR3gg4qLnlhaG9vLmNvbS5oa4IRKi52aWRlby55YWhvby5jb22CFSoudXNl
ci5tYWxsLnlhaG9vLmNvbYITKi51c2VkY2FyLnlhaG9vLmNvbYITKi50dy5tYWxs
LnlhaG9vLmNvbYIXKi50dy5jYW1wYWlnbi55YWhvby5uZXSCFyoudHcuY2FtcGFp
Z24ueWFob28uY29tghIqLnR3LmJ1eS55YWhvby5jb22CDioudHYueWFob28uY29t
ghIqLnRyZW5kci55YWhvby5jb22CFSoudG5zLm5ldmVjLnlhaG9vLmNvbYIUKi5z
dXBwbGllci55YWhvby5jb22CESouc3RvY2sueWFob28uY29tghIqLnNtYXJ0ci55
YWhvby5jb22CDyouc2hwLnlhaG9vLmNvbYITKi5zYy5tYWxsLnlhaG9vLmNvbYIU
Ki5yY3YubWFsbC55YWhvby5jb22CESoucHJvbW8ueWFob28uY29tghUqLnByb21v
LmJpZC55YWhvby5jb22CESoucHJpbWUueWFob28uY29tghIqLnBvaW50cy55YWhv
by5jb22CEyoucGFhcy5lYy55YWhvby5jb22CFyoub3BlcmF0ZS5idXkueWFob28u
Y29tghAqLm5ld3MueWFob28uY29tghEqLm5ldmVjLnlhaG9vLmNvbYIRKi5tb25l
eS55YWhvby5jb22CDyoubW9uZGF5LmNvbS50d4IQKi5tb2JpLnlhaG9vLmNvbYIU
Ki5tZXJjaGFudC55YWhvby5jb22CESoubWVkaWEueWFob28uY29tghAqLm1hbGwu
eWFob28uY29tghIqLm1ha2Vycy55YWhvby5jb22CGSoubS50dy5jYW1wYWlnbi55
YWhvby5uZXSCEyoubHRtLmJ1eS55YWhvby5jb22CFCoubGl2ZWNoYXQueWFob28u
Y29tghMqLmZpbmFuY2UueWFob28uY29tgg4qLmVuZ2FkZ2V0LmNvbYIWKi5lZG1i
Yy5tYWxsLnlhaG9vLmNvbYIOKi5lYy55YWhvby5jb22CEyouY21wLnNocC55YWhv
by5jb22CECouY21wLnA0cG5ldC5uZXSCEyouY2hhcml0eS55YWhvby5jb22CFyou
Y2FtcGFpZ24ueWFob28uY29tLnR3ghcqLmNhbXBhaWduLnlhaG9vLmNvbS5oa4IY
Ki5jYW1wYWlnbi5iaWQueWFob28uY29tghIqLmJ1eS55YWhvby5jb20udHeCDyou
YnV5LnlhaG9vLmNvbYIPKi5iaWQueWFob28uY29tghEqLmJjLnlhaG9vLmNvbS50
d4IOKi5iYy55YWhvby5jb22CEyouYXBpLnVkYi55YWhvby5jb22CGiouYW5hbHl0
aWNzLm1hbGwueWFob28uY29tghkqLmFuYWx5dGljcy5idXkueWFob28uY29tghkq
LmFuYWx5dGljcy5iaWQueWFob28uY29tghQqLmFidW1lZGlhLnlhaG9vLmNvbTA+
BgNVHSAENzA1MDMGBmeBDAECAjApMCcGCCsGAQUFBwIBFhtodHRwOi8vd3d3LmRp
Z2ljZXJ0LmNvbS9DUFMwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUF
BwMBBggrBgEFBQcDAjB1BgNVHR8EbjBsMDSgMqAwhi5odHRwOi8vY3JsMy5kaWdp
Y2VydC5jb20vc2hhMi1oYS1zZXJ2ZXItZzYuY3JsMDSgMqAwhi5odHRwOi8vY3Js
NC5kaWdpY2VydC5jb20vc2hhMi1oYS1zZXJ2ZXItZzYuY3JsMIGDBggrBgEFBQcB
AQR3MHUwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmRpZ2ljZXJ0LmNvbTBNBggr
BgEFBQcwAoZBaHR0cDovL2NhY2VydHMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0U0hB
MkhpZ2hBc3N1cmFuY2VTZXJ2ZXJDQS5jcnQwDAYDVR0TAQH/BAIwADATBgorBgEE
AdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZkqfcj6C8MeiqrkvGHHb
YRxaWJcPYzwv38doCFK+8g52kLdSZ0aPuaNCnaR/gBNZGScLXfzMtZl7SbafhWFM
MUnLuUYbnPnfgYz3iUg/mp0mDY+v35uO+RPltBL1GZaLy7SRwyqfsv171lWXXTvf
RI9bK/YWrCuGm+zlzXISGPaLbWv5GHuu9YNAMw1v8Gt6DhuBEC6KEYb/6o48imPd
ZLZtYkrzDHGVFSbZAZbrZWU3jQt8EWFZ+KqeXpR9VQBnhipT8zhBuks1UGWkNGyy
Z2/CvreaD7SiHrWhzHbtp3qnoFH3IHRYoaC481/HRRj8UkD7F/MM9nxOvLEQal/O
/A==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkO0962UpTrXVCquJ/zSt
ovO9EDhF8nOWqtw0ae2jMDYQZYSsqWClEaZ0AlMxSqmfUtaffSiFrzvM84HnvEjQ
axsloRnuD2x5tZg1V1NDuBfXnfDiStIF4/nzRyibhqA0XTttsX6x0mBIhVEkpI76
jFhpmLj4tJ9M1ikBlLY7101jnur2iiEWa+Yh9qz65/6fWpYZRk839BiBNDocIxad
fCscpLHicY/NRK2rDiJKgDf5tQcjS7WolsOLPm/0wAlcvmKIVLg6s6zVs6Ib209Y
rPGyeHmRktRFjG4Uod+dVzlxqkjQ5CHdmgTqyJguukosyySmrfddA+UL/kkDJF7/
UQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12339319141189101503598576421537462876
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-19 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-13 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sunnyvale'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Oath Holdings Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ystore.tw'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18295304242950333359578647140352919558368111894949283524149175725184981153902396286281686460137569373325717539064512255192692363346264599145248162973662836416294650996326144403233428268294977537081141850131150568980747367489889990653255760725455118184639576972601172796478271155519674368430874302300194510533283787861027678450072760380174650393832953042407313851434364152864295804435208363949443457257999084070975975550690171475317408021876594473638364540448868794208557279602313288695939134746606892356574570552082910432554554631945439604414665407271444966940903139229442296056283303828222023468924608170119300841297
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							02339f477a28aaf09ea6fa7d13bacaace542e15f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1962 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ystore.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yshop.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ybid.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yahoo.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yahoo.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tw.ysm.emarketing.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tw.systex.finance.yahoo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tw.stockapp-string.finance.yahoo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tw.screener.finance.yahoo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tw.sales.emarketing.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tw.quote.finance.yahoo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tw.ptnr.yimg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tw.payment.charity.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tw.partner.buy.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tw.live.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tw.linkspot.search.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tw.esports.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tw.emarketing.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tw.edit.listing.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tw.edit.finance.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tw.campaign.money.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partner.pr.buy.yahoo.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hk.realestate.yahoo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hk.promotions.yahoo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hk.promotions.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hk.promotion.yahoo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hk.lifestyle.yahoo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hk.esports.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hk.emarketing.yahoo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hk.celebrity.yahoo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'au.sports.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'au.lifestyle.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.youcard.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yimg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yahoo.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yahoo.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.video.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.user.mall.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.usedcar.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tw.mall.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tw.campaign.yahoo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tw.campaign.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tw.buy.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tv.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.trendr.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tns.nevec.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.supplier.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stock.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.smartr.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shp.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sc.mall.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rcv.mall.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.promo.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.promo.bid.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prime.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.points.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.paas.ec.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.operate.buy.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.news.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nevec.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.money.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.monday.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mobi.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.merchant.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.media.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mall.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.makers.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.m.tw.campaign.yahoo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ltm.buy.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.livechat.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.finance.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.engadget.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.edmbc.mall.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ec.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cmp.shp.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cmp.p4pnet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.charity.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.campaign.yahoo.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.campaign.yahoo.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.campaign.bid.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.buy.yahoo.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.buy.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bid.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bc.yahoo.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bc.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.udb.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.analytics.mall.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.analytics.buy.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.analytics.bid.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.abumedia.yahoo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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