uc18.janrainengage.com

- JanRain, Inc. -

Issued by DigiCert SHA2 High Assurance Server CA

About this certificate

This digital certificate with serial number 04:0a:d3:48:e1:4e:4e:64:a7:0f:5a:52:57:85:14:0d was issued on by DigiCert Inc.

With 102 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

JanRain, Inc.

Organization: JanRain, Inc.
State / Province: OR
Locality: Portland
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:0a:d3:48:e1:4e:4e:64:a7:0f:5a:52:57:85:14:0d
Serial Number (int): 5373120314307876922422885190270784525
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 28:83:57:28:e6:25:6b:03:f2:24:58:e5:e7:81:e5:38:27:8e:3e:76
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b

Fingerprint (sha1): 13:7e:b1:ea:f4:0d:2a:86:e4:46:ab:f4:f0:31:e1:ef:35:87:a4:ec
Fingerprint (sha256): 82:96:f1:1b:90:02:9a:3a:4f:0d:38:de:82:97:9b:8c:f4:07:af:63:74:c8:7a:47:ed:d2:75:9a:86:ee:25:94

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g3.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g3.crl

Check the revocation status for certificate uc18.janrainengage.com

102

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for uc18.janrainengage.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

uc18.janrainengage.com
auth.ecova.com
auth.hollandamerica.com
auth.kickball.com
auth.mycokerewards.com
auth.pointdrive.com
auth-public.iso.org
auth.test.mycokerewards.com
connect.dailysteals.com
dev-login.rodales.com
employer-login.dice.com
engage.cocacola.co.jp
feedback.twitterfeedback.com
gstlogin.eliteislandresorts.com
jlogin.softsurroundings.com
login.abercrombie.com
login.abercrombiekids.com
login.alittihad.ae
login.aok.tv
login.audi-motorsport.com
login.cakesystems.com
login.careeradex.com
login.chicagopublicmedia.org
login.claim2fame.org
login.crowdstreet.com
login.dev1-food.com
login.dev1-foodnetwork.com
login.dev1-foodonthetable.com
login.dev1-hgtv.com
login.dev1-hgtvremodels.com
login.food.com
login.foodnetwork.com
login.football24.ua
login.freesat.co.uk
login.gillyhicks.com
login.glamour.com
login.grv.eu.pfizer.com
login.grv.us.pfizer.com
login.hgtv.com
login.hgtvremodels.com
login.hollisterco.com
login.iuzeit.com
login.johnstonpress.co.uk
login.lollapaloozaar.com
login.networkedorganisms.com
login.petsmart.com
login.qubbi.me
login.qype.com
login.recode.net
login.restaurantconnect.com
login.rexall.ca
login.rodales.com
login.rogersmedia.com
login.sister.tv
login.stjamesplantation.com
login.super.ae
login.systemvision.com
login-test.deloitte.com
login.thecsiac.com
login.topdecktravel.co.uk
login.toplaserspa.com
login.unknown.com
login.who2try.com
login.zeker.me
private.ncsyes.co.uk
profile.paloaltonetworks.com
secure.schwartzmedia.com.au
share.heart.org
sign-in.artistlink.com
signin.mundotkm.com
signin.myinchoftheearth.com
signin.oioo.com
signin.physiciansonline.ca
signin.plotfinder.net
signin.projectnoah.org
signin.staffeasy.com
signin.tenplay.com.au
signin.thelocalpeople.co.uk
signin.tradepub.com
signin.twitterfeed.com
signin.vg.no
signin.viewpoints.com
signin.whatsopen.com
signup.sictronics.com
signup.tigweb.org
signup.universalmusic.com
social.globalspec.com
social.innovateportal.com
social-login.nowtv.com
social-login.samsclubauto.com
social.picmycase.com
socialsignin.axiomsfd.com
socialsignin.thehartford.com
social.thesun.co.uk
social.thetimes.co.uk
social.transaxt.com
social.uat-thesun.co.uk
social.uat-thetimes.co.uk
sso.designerpages.com
thisis50.networkauth.com
triad-login.systemvision.com
web-login.mypsn.com

Other certificates including the domain name janrainengage.com

(limited to 100 certificates)
*.rpxnow.com
uc17.janrainengage.com
uc13.janrainengage.com
uc12.janrainengage.com
uc16.janrainengage.com
uc13.janrainengage.com
uc18.janrainengage.com
uc16.janrainengage.com
uc18.janrainengage.com
uc18.janrainengage.com
uc14.janrainengage.com
uc16.janrainengage.com
uc17.janrainengage.com
uc16.janrainengage.com
uc16.janrainengage.com
uc16.janrainengage.com
*.rpxnow.com
uc17.janrainengage.com
uc13.janrainengage.com
uc17.janrainengage.com
uc18.janrainengage.com
uc16.janrainengage.com
uc17.janrainengage.com
*.eval.janrainengage.com
uc18.janrainengage.com
uc18.janrainengage.com
uc15.janrainengage.com
uc16.janrainengage.com
uc18.janrainengage.com
uc17.janrainengage.com
uc17.janrainengage.com
uc17.janrainengage.com
uc17.janrainengage.com
uc16.janrainengage.com
uc13.janrainengage.com
uc17.janrainengage.com
*.eval.janrainengage.com
uc15.janrainengage.com
uc09.janrainengage.com
*.eval.janraincapture.com
uc16.janrainengage.com
*.eval.janrainengage.com
uc18.janrainengage.com
uc17.janrainengage.com
uc18.janrainengage.com
uc17.janrainengage.com
uc15.janrainengage.com
uc17.janrainengage.com
uc18.janrainengage.com
uc18.janrainengage.com
uc16.janrainengage.com
uc17.janrainengage.com
uc18.janrainengage.com
uc17.janrainengage.com
uc17.janrainengage.com
*.eval.janrainengage.com
uc14.janrainengage.com
uc18.janrainengage.com
uc17.janrainengage.com
uc18.janrainengage.com
*.eval.janrainengage.com
uc16.janrainengage.com
uc16.janrainengage.com
uc17.janrainengage.com
uc15.janrainengage.com
uc15.janrainengage.com
uc18.janrainengage.com
uc17.janrainengage.com
uc17.janrainengage.com
*.rpxnow.com
uc18.janrainengage.com
*.rpxnow.com
*.rpxnow.com
uc18.janrainengage.com
uc09.janrainengage.com
uc17.janrainengage.com
uc18.janrainengage.com
uc17.janrainengage.com
uc17.janrainengage.com
uc19.janrainengage.com
uc17.janrainengage.com
uc17.janrainengage.com
uc18.janrainengage.com
uc16.janrainengage.com
uc17.janrainengage.com
*.rpxnow.com
uc16.janrainengage.com
uc15.janrainengage.com
uc17.janrainengage.com
uc12.janrainengage.com
uc18.janrainengage.com
uc09.janrainengage.com
uc16.janrainengage.com
uc18.janrainengage.com
uc18.janrainengage.com
uc18.janrainengage.com
uc09.janrainengage.com
uc18.janrainengage.com
uc16.janrainengage.com
uc18.janrainengage.com

Certificate

The complete raw certificate details for uc18.janrainengage.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz4rhSIAPZKCrT87K1u2U
UQHc2LJGXo5kqHzHMTOahNuu7gWRdTtx97BmjyBQkRIEXE7AOvrGWHgkSF92btX4
g3tTKuAXenKvNWIJIWPzxBt0iYqxUtgLWUh5rsTQdiIrCGtprrRePrmc7mLO9svj
+ug2AzavKOQ0gdL5LM2YLRCcA0rnmY7QZdfY0Yv1PUgHC7ljpd7BuaeAsg5W4jBW
KlcJLrcTyCoqN4R9FsSBbKZBnGxOU4reVcwNlhIbRRZcPhNuROqgB1nMmHx7Dl6H
qh1Bix7cqWCcgMsKuEhW3wRvziMmFPLMfcXPrgb9uXqPVHz+GdU7fkLNq3X+2zEM
IQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5373120314307876922422885190270784525
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-04-15 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-05-03 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'OR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Portland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JanRain, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'uc18.janrainengage.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26199813414589988184649401508664039903667935121132189344203084883798313806232290229574118489847525072030838443149890116169476880689269606050525805448121669475304060715737228841691416389164471186405727880163612266479277353655679801454144624483791923006262001614896073412481080538522121891139201952529433424497954024408974205120889350377300130941983244164568130308991824016845281766173255939547221870862591157494923599683462293769133821164854034583277898316287893401427113539452231054027777236847954444995988696609147177348415713322076484468551916935332975770085873000547981787011529012126174583580808570671580079787041
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							28835728e6256b03f22458e5e781e538278e3e76
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2373 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uc18.janrainengage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.ecova.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.hollandamerica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.kickball.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.mycokerewards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.pointdrive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth-public.iso.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.test.mycokerewards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.dailysteals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-login.rodales.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'employer-login.dice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'engage.cocacola.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feedback.twitterfeedback.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gstlogin.eliteislandresorts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jlogin.softsurroundings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.abercrombie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.abercrombiekids.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.alittihad.ae'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.aok.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.audi-motorsport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.cakesystems.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.careeradex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.chicagopublicmedia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.claim2fame.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.crowdstreet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.dev1-food.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.dev1-foodnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.dev1-foodonthetable.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.dev1-hgtv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.dev1-hgtvremodels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.food.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.foodnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.football24.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.freesat.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.gillyhicks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.glamour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.grv.eu.pfizer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.grv.us.pfizer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.hgtv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.hgtvremodels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.hollisterco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.iuzeit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.johnstonpress.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.lollapaloozaar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.networkedorganisms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.petsmart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.qubbi.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.qype.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.recode.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.restaurantconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.rexall.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.rodales.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.rogersmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.sister.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.stjamesplantation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.super.ae'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.systemvision.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login-test.deloitte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.thecsiac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.topdecktravel.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.toplaserspa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.unknown.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.who2try.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.zeker.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'private.ncsyes.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'profile.paloaltonetworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.schwartzmedia.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'share.heart.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sign-in.artistlink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'signin.mundotkm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'signin.myinchoftheearth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'signin.oioo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'signin.physiciansonline.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'signin.plotfinder.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'signin.projectnoah.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'signin.staffeasy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'signin.tenplay.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'signin.thelocalpeople.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'signin.tradepub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'signin.twitterfeed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'signin.vg.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'signin.viewpoints.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'signin.whatsopen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'signup.sictronics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'signup.tigweb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'signup.universalmusic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'social.globalspec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'social.innovateportal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'social-login.nowtv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'social-login.samsclubauto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'social.picmycase.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'socialsignin.axiomsfd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'socialsignin.thehartford.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'social.thesun.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'social.thetimes.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'social.transaxt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'social.uat-thesun.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'social.uat-thetimes.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sso.designerpages.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thisis50.networkauth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'triad-login.systemvision.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web-login.mypsn.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g3.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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