uc09.janrainengage.com

- JanRain, Inc. -

Issued by DigiCert SHA2 High Assurance Server CA

About this certificate

This digital certificate with serial number 03:3e:7a:b1:9b:4e:f6:f1:2b:b9:98:47:6c:ae:ae:63 was issued on by DigiCert Inc.

With 116 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

JanRain, Inc.

Organization: JanRain, Inc.
State / Province: OR
Locality: Portland
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:3e:7a:b1:9b:4e:f6:f1:2b:b9:98:47:6c:ae:ae:63
Serial Number (int): 4312094918005956347469038846737296995
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: de:3f:e9:9c:f0:33:91:5f:f5:80:e5:df:4a:a4:a0:df:95:98:59:af
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b

Fingerprint (sha1): 78:2f:23:a5:7f:aa:a6:70:a7:2f:e4:79:d2:32:14:89:35:b2:73:72
Fingerprint (sha256): 7d:0c:04:36:6c:e9:d8:c0:82:bd:6e:11:8c:20:cc:2e:81:a0:e8:e0:7a:fb:73:ee:82:4a:cc:46:b2:c4:61:ad

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g4.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g4.crl

Check the revocation status for certificate uc09.janrainengage.com

116

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for uc09.janrainengage.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

uc09.janrainengage.com
authorization.mojoportal.com
community-login.nasdaq.com
community.winduprecords.com
connect.flux.com
connect.graze.com
ext-login.portfolio.com
globallogin.sanook.com
login.360inc.nl
login.abita.com
login.andersonvalleypost.com
login.appolicious.com
login.asksunday.com
login.audiomicro.com
login.avro.nl
login.baltimoresun.com
login.bizjournals.com
login.blounttoday.com
login.boxboss.com
login.caller.com
login.certivox.com
login.chicagotribune.com
login.cigaraficionado.com
login.citylocal.co.uk
login.citylocal.ie
login.citysearch.com
login.cleardebt.co.uk
login.coastalbeat.com
login.commercialappeal.com
login.courant.com
login.courierpress.com
login.ctnow.com
login.dailyhappyhour.com
login.dailypress.com
login.deadmau5.com
login.dev.ideascale.com
login.divinecaroline.com
login.explore.org
login.expono.com
login.foster.washington.edu
login.fundnet.ca
login.getsatisfaction.com
login.gomemphis.com
login.gosanangelo.com
login.govolsxtra.com
login.habbo.com
login.harlaninstitute.org
login.ideascale.com
login.independentmail.com
login.irc-galleria.net
login.janrain.com
login.kitsapsun.com
login.knoxnews.com
login.knoxville.com
login.latimes.com
login.localtrb.com
login.mahalo.com
login.marconews.com
login.matchmovegames.com
login.mcall.com
login.metropulse.com
login.naplesnews.com
login.newsok.com
login.orangeandwhite.com
login.orlandosentinel.com
login.oxseed.com
login.pamfax.biz
login.pauladeen.com
login.pfizerhealthbeat.com
login.poweredbyamp.com
login.readprint.com
login.redding.com
login.reporternews.com
login.ronetwork.net
login.sapsustainabilityreport.com
login.skedge.me
login.slate.fr
login.sonora.terra.com
login.stribe.com
login.sun-sentinel.com
login.taatu.com
login.tcpalm.com
login.timesrecordnews.com
login.tribunepromotions.com
login.vcstar.com
login.wsits.com
login.yourshopping.com
login.zoozag.com
openid.informatm.com
openid.luxsci.com
openid.redplum.com
openid.waakee.com
rpx.aanmelden.concentra.be
signin.aldiatx.com
signin.been.co.uk
signin.channel.nationalgeographic.com
signin.cityforward.com
signin.comicrelief.com
signin.dallasnews.com
signin.dentonrc.com
signin.jcwhitney.com
signin.koldcast.tv
signin.lifeway.com
signin.mykmart.com
signin.mysears.com
signin-myvoice.mygofer.com
signin.nationalgeographic.com
signin.openid.net
signin.partybussen.nl
signin.pettube.com
signin.projo.com
signin.savings.com
signin.savoo.co.uk
signin.shld.net
signin.smartshoppersunite.com
signin.staging.divinecaroline.com

Other certificates including the domain name janrainengage.com

(limited to 100 certificates)
*.rpxnow.com
uc17.janrainengage.com
uc13.janrainengage.com
uc12.janrainengage.com
uc16.janrainengage.com
uc13.janrainengage.com
uc18.janrainengage.com
uc16.janrainengage.com
uc18.janrainengage.com
uc18.janrainengage.com
uc14.janrainengage.com
uc16.janrainengage.com
uc17.janrainengage.com
uc16.janrainengage.com
uc16.janrainengage.com
uc16.janrainengage.com
*.rpxnow.com
uc17.janrainengage.com
uc13.janrainengage.com
uc17.janrainengage.com
uc18.janrainengage.com
uc16.janrainengage.com
uc17.janrainengage.com
*.eval.janrainengage.com
uc18.janrainengage.com
uc18.janrainengage.com
uc15.janrainengage.com
uc16.janrainengage.com
uc18.janrainengage.com
uc17.janrainengage.com
uc17.janrainengage.com
uc17.janrainengage.com
uc17.janrainengage.com
uc16.janrainengage.com
uc13.janrainengage.com
uc17.janrainengage.com
*.eval.janrainengage.com
uc15.janrainengage.com
uc09.janrainengage.com
*.eval.janraincapture.com
uc16.janrainengage.com
*.eval.janrainengage.com
uc18.janrainengage.com
uc17.janrainengage.com
uc18.janrainengage.com
uc17.janrainengage.com
uc15.janrainengage.com
uc17.janrainengage.com
uc18.janrainengage.com
uc18.janrainengage.com
uc16.janrainengage.com
uc17.janrainengage.com
uc18.janrainengage.com
uc17.janrainengage.com
uc17.janrainengage.com
*.eval.janrainengage.com
uc14.janrainengage.com
uc18.janrainengage.com
uc17.janrainengage.com
uc18.janrainengage.com
*.eval.janrainengage.com
uc16.janrainengage.com
uc16.janrainengage.com
uc17.janrainengage.com
uc15.janrainengage.com
uc15.janrainengage.com
uc18.janrainengage.com
uc17.janrainengage.com
uc17.janrainengage.com
*.rpxnow.com
uc18.janrainengage.com
*.rpxnow.com
*.rpxnow.com
uc18.janrainengage.com
uc09.janrainengage.com
uc17.janrainengage.com
uc18.janrainengage.com
uc17.janrainengage.com
uc17.janrainengage.com
uc19.janrainengage.com
uc17.janrainengage.com
uc17.janrainengage.com
uc18.janrainengage.com
uc16.janrainengage.com
uc17.janrainengage.com
*.rpxnow.com
uc16.janrainengage.com
uc15.janrainengage.com
uc17.janrainengage.com
uc12.janrainengage.com
uc18.janrainengage.com
uc09.janrainengage.com
uc16.janrainengage.com
uc18.janrainengage.com
uc18.janrainengage.com
uc18.janrainengage.com
uc09.janrainengage.com
uc18.janrainengage.com
uc16.janrainengage.com
uc18.janrainengage.com

Certificate

The complete raw certificate details for uc09.janrainengage.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwnIGIEbQONeIDwoWUW5h
NiWea/zZENZsKzq5wguwGzPkGpoPESWfOFP5kUuPjTwbxvqRz9s02Pf5ZvoscWwi
LX+/O8xWTJiMtzdawnHktWNGi9wwF4XFisOAOfqvxmIPUSJ64ox1HoDkxVj7i5x5
5N8N5HsEncyMnoTZxJgi1HHRdT6l/iPPLW8IvNtUzy3SS0k7hY34sOE6ZHhOM7sQ
H/TLJggft8LzJIMoDGPv3RggidBG8gafBu1CGNZ+lblfy4NMb1XrwBijfCh9OpwZ
LSu5RxPxxXEeyIA3zJ95n2FiV6rg3Ovrmxlj4FAsa7ePEjB1LDZJ6ox2CIUvETpw
zwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4312094918005956347469038846737296995
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-04-27 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-05-03 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'OR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Portland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JanRain, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'uc09.janrainengage.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24546458458919388411033213924353325513193198911092124818704148898210335561707731939490759776578614993604470134609721070614748872166382266659179368470098804270593131114231282641594083951635471813635245523367543482099592808136838149972702181127352028839132789336144515402068332717113391098289903651042479510920450627021637014684614200829367377758020623185669825836244943942578728141161887388257111256566566305426868327458568457934423975833251324855160605960418075864591776654285913275363592941780335164018469594752055984568210916637524262046831761763179632582275719153898595848143559136746513195310385409212903440675023
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							de3fe99cf033915ff580e5df4aa4a0df959859af
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2592 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uc09.janrainengage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'authorization.mojoportal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community-login.nasdaq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.winduprecords.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.flux.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.graze.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ext-login.portfolio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globallogin.sanook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.360inc.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.abita.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.andersonvalleypost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.appolicious.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.asksunday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.audiomicro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.avro.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.baltimoresun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.bizjournals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.blounttoday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.boxboss.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.caller.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.certivox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.chicagotribune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.cigaraficionado.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.citylocal.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.citylocal.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.citysearch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.cleardebt.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.coastalbeat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.commercialappeal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.courant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.courierpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.ctnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.dailyhappyhour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.dailypress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.deadmau5.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.dev.ideascale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.divinecaroline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.explore.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.expono.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.foster.washington.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.fundnet.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.getsatisfaction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.gomemphis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.gosanangelo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.govolsxtra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.habbo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.harlaninstitute.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.ideascale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.independentmail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.irc-galleria.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.janrain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.kitsapsun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.knoxnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.knoxville.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.latimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.localtrb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.mahalo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.marconews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.matchmovegames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.mcall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.metropulse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.naplesnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.newsok.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.orangeandwhite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.orlandosentinel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.oxseed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.pamfax.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.pauladeen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.pfizerhealthbeat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.poweredbyamp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.readprint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.redding.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.reporternews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.ronetwork.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.sapsustainabilityreport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.skedge.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.slate.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.sonora.terra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.stribe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.sun-sentinel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.taatu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.tcpalm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.timesrecordnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.tribunepromotions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.vcstar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.wsits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.yourshopping.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.zoozag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'openid.informatm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'openid.luxsci.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'openid.redplum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'openid.waakee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rpx.aanmelden.concentra.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'signin.aldiatx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'signin.been.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'signin.channel.nationalgeographic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'signin.cityforward.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'signin.comicrelief.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'signin.dallasnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'signin.dentonrc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'signin.jcwhitney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'signin.koldcast.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'signin.lifeway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'signin.mykmart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'signin.mysears.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'signin-myvoice.mygofer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'signin.nationalgeographic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'signin.openid.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'signin.partybussen.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'signin.pettube.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'signin.projo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'signin.savings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'signin.savoo.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'signin.shld.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'signin.smartshoppersunite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'signin.staging.divinecaroline.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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