*.abumedia.yahoo.com

- Oath Inc -

Issued by DigiCert SHA2 High Assurance Server CA

About this certificate

This digital certificate with serial number 0e:c4:c3:ee:c4:aa:d9:29:89:61:44:37:81:6b:61:fe was issued on by DigiCert Inc.

With 90 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Oath Inc

Organization: Oath Inc
State / Province: California
Locality: Sunnyvale
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:c4:c3:ee:c4:aa:d9:29:89:61:44:37:81:6b:61:fe
Serial Number (int): 19630856112302643740550971727895290366
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 6c:93:ac:27:1b:20:57:20:f7:45:e5:fb:91:42:1a:42:8a:6d:04:36
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b

Fingerprint (sha1): cf:c5:45:0d:30:e5:65:32:ee:6f:48:31:ef:d6:91:87:12:7b:0e:a2
Fingerprint (sha256): b7:6f:0d:db:8e:dc:fc:de:f8:9f:a2:cc:e1:66:a2:43:56:43:15:6f:d0:3b:78:54:3a:89:28:3c:da:52:89:62

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g6.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g6.crl

Check the revocation status for certificate *.abumedia.yahoo.com

90

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.abumedia.yahoo.com

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.abumedia.yahoo.com
*.api.udb.yahoo.com
*.campaign.yahoo.com.hk
*.campaign.yahoo.com.tw
*.m.tw.campaign.yahoo.net
*.smartr.yahoo.com
*.tv.yahoo.com
*.tw.campaign.yahoo.com
*.tw.campaign.yahoo.net
*.video.yahoo.com
*.yahoo.com.hk
*.yahoo.com.tw
*.yimg.com
*.youcard.yahoo.com
au.lifestyle.yahoo.com
*.news.yahoo.com
au.sports.yahoo.com
hk.celebrity.yahoo.net
hk.emarketing.yahoo.net
hk.esports.yahoo.com
hk.lifestyle.yahoo.net
hk.promotion.yahoo.net
hk.promotions.yahoo.com
hk.promotions.yahoo.net
hk.realestate.yahoo.net
*.trendr.yahoo.com
tw.campaign.money.yahoo.com
*.charity.yahoo.com
tw.edit.finance.yahoo.com
tw.edit.listing.yahoo.com
tw.emarketing.yahoo.com
tw.esports.yahoo.com
*.finance.yahoo.com
tw.linkspot.search.yahoo.com
tw.live.yahoo.com
*.money.yahoo.com
tw.payment.charity.yahoo.com
tw.quote.finance.yahoo.net
tw.sales.emarketing.yahoo.com
tw.screener.finance.yahoo.net
*.stock.yahoo.com
tw.stockapp-string.finance.yahoo.net
tw.systex.finance.yahoo.net
tw.ysm.emarketing.yahoo.com
yahoo.com.hk
yahoo.com.tw
*.media.yahoo.com
*.engadget.com
*.makers.yahoo.com
*.ec.yahoo.com
*.usedcar.yahoo.com
*.bid.yahoo.com
*.mall.yahoo.com
*.buy.yahoo.com
yshop.tw
ystore.tw
ybid.tw
*.paas.ec.yahoo.com
*.tns.nevec.yahoo.com
*.nevec.yahoo.com
*.bc.yahoo.com
*.tw.mall.yahoo.com
*.user.mall.yahoo.com
*.sc.mall.yahoo.com
*.points.yahoo.com
*.promo.yahoo.com
*.edmbc.mall.yahoo.com
*.rcv.mall.yahoo.com
*.analytics.buy.yahoo.com
*.analytics.mall.yahoo.com
*.buy.yahoo.com.tw
*.cmp.p4pnet.net
*.cmp.shp.yahoo.com
*.ltm.buy.yahoo.com
*.operate.buy.yahoo.com
tw.partner.buy.yahoo.com
tw.ptnr.yimg.com
partner.pr.buy.yahoo.com.tw
*.campaign.bid.yahoo.com
*.analytics.bid.yahoo.com
*.promo.bid.yahoo.com
*.shp.yahoo.com
*.tw.buy.yahoo.com
*.merchant.yahoo.com
*.supplier.yahoo.com
*.bc.yahoo.com.tw
*.mobi.yahoo.com
*.monday.com.tw
*.livechat.yahoo.com
*.prime.yahoo.com

Other certificates including the domain name yahoo.com

(limited to 100 certificates)
digits3.data.yahoo.com
checkout.yahoo.com
*.sonic.mail.yahoo.com
master.data.yahoo.com
login.yahoo.com
backend.paranoids.corp.yahoo.com
qa.edge.ymon.corp.ne1.yahoo.com
*.store.yahoo.com
www.yahoo.com
chilledfilled.corp.gq1.yahoo.com
san.test-paranoids.yahoo.com
allhands.corp.yahoo.com
*.stage.login.yahoo.com
test012.san.test-paranoids.yahoo.com
tw.preview.campaign.money.yahoo.com
stage.api.onepush.mobile.yahoo.com
endurepoor.corp.ir2.yahoo.com
privbin.corp.yahoo.com
tw.mobi.yahoo.com
tw.knowledge.yahoo.com
stg-sandyui-01.netops.corp.gq1.yahoo.com
cosmos.bcp.search.corp.yahoo.com
testdata.factory.vespa.corp.yahoo.com
mobileexcellence.corp.yahoo.com
staging-origin-life.huffpo.net
lab-uic-pub.lab.rich.corp.yahoo.com
pr.comet.yahoo.com
admin.nevec.yahoo.com
steamedesteemed.corp.sg3.yahoo.com
stage.api.pes.yahoo.com
test.dek.ckms.yahoo.com
goglobal-demo.g11n.corp.gq1.yahoo.com
academy-delivery.cc.corp.yahoo.com
beta.api.backyard3.corp.yahoo.com
tw.billing.yahoo.com
sp.analytics.yahoo.com
dwdevetl02.fin.corp.gq1.yahoo.com
uc-gq1-vcenter1.corp.gq1.yahoo.com
backend-stage.paranoids.corp.yahoo.com
wherehaus.stage.geotech.corp.yahoo.com
gq1-psinprd-clu.psi.corp.gq1.yahoo.com
*.jeditools.mail.yahoo.com
kite-tools.pbp.corp.ne1.yahoo.com
origin.qa.dispatcher.yahoo.com
*.ea.ops.yahoo.com
endurepoor.corp.ir2.yahoo.com
*.report.gemini.yahoo.com
api.soln-stage.isvc.cp.yahoo.com
backend-stage.paranoids.corp.yahoo.com
san.test-paranoids.yahoo.com
san.test-paranoids.yahoo.com
tw.db.media.yahoo.com
*.cs.gq1-1.manhattan.gq1.yahoo.com
sh-gdpr.search.yahoo.com
*.abumedia.yahoo.com
*.answers.ycpi.yahoo.com
*.tee.ops.search.yahoo.com
privbin.corp.yahoo.com
oxy-oxygen-4a0620a5.gq1.yahoo.com
e2.ycpi.aeb.yahoo.com
secure02.lithium.com
telco-sg3-jump.sg3.corp.yahoo.com
legacy.pop.mail.yahoo.com
privbin.corp.yahoo.com
admin.ckms.yahoo.com
sp.analytics.yahoo.com
*.api.gemini.yahoo.com
dev.ui.payments.yahoo.com
dspskadpostback.aaca.yahooinc.com
san.test-paranoids.yahoo.com
splunk1.flurry.gq1.yahoo.com
certreloader.demo.yahoo.com
splunk.dspe.yahoo.com
src2.yahoo.com
profileproxy.prod.tgt.bf1.yahoo.com
legaltoolsstage.corp.yahoo.com
test1.yahoo.com
st39.yahoo.com
beta.edit.client.yahoo.com
chat.ouroath.com
endurepoor.corp.ir2.yahoo.com
*.chef.ops.yahoo.com
backend-stage.paranoids.corp.yahoo.com
san.test-paranoids.yahoo.com
manhattan.yahoo.com
dev.productcentral.aol.com
*.tripod.bf2.yahoo.com
ws.mobile.mail.yahoo.com
vpn2-1-gci.eglbp.corp.yahoo.com
endurepoor.corp.ir2.yahoo.com
yakl-rules.ops.yahoo.com
jp.techcrunch.com
ldap-mgmnt.corp.yahoo.com
yql.onepush.mobile.yahoo.com
*.hlfs.yahoo.com
*.wv.msg.yahoo.com
endurepoor.corp.ir2.yahoo.com
ads.vidible.tv
kronostest.fin.corp.yahoo.com
api.native.yahooinc.com

Certificate

The complete raw certificate details for *.abumedia.yahoo.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEF/BBbSMkVlqQvcLePFE6lt7oLh+H
aoWCPSE3JVyEf+SdMHgzOXgrhMWzlxrv6zPUbv5MbWl/Y3+vHf8d1lgQaQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19630856112302643740550971727895290366
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-03 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-05-25 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sunnyvale'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Oath Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.abumedia.yahoo.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				000417f0416d2324565a90bdc2de3c513a96dee82e1f876a85823d2137255c847fe49d30783339782b84c5b3971aefeb33d46efe4c6d697f637faf1dff1dd6581069
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6c93ac271b205720f745e5fb91421a428a6d0436
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1962 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.abumedia.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.udb.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.campaign.yahoo.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.campaign.yahoo.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.m.tw.campaign.yahoo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.smartr.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tv.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tw.campaign.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tw.campaign.yahoo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.video.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yahoo.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yahoo.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yimg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.youcard.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'au.lifestyle.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.news.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'au.sports.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hk.celebrity.yahoo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hk.emarketing.yahoo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hk.esports.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hk.lifestyle.yahoo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hk.promotion.yahoo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hk.promotions.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hk.promotions.yahoo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hk.realestate.yahoo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.trendr.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tw.campaign.money.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.charity.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tw.edit.finance.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tw.edit.listing.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tw.emarketing.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tw.esports.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.finance.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tw.linkspot.search.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tw.live.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.money.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tw.payment.charity.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tw.quote.finance.yahoo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tw.sales.emarketing.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tw.screener.finance.yahoo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stock.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tw.stockapp-string.finance.yahoo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tw.systex.finance.yahoo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tw.ysm.emarketing.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yahoo.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yahoo.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.media.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.engadget.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.makers.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ec.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.usedcar.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bid.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mall.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.buy.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yshop.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ystore.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ybid.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.paas.ec.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tns.nevec.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nevec.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bc.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tw.mall.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.user.mall.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sc.mall.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.points.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.promo.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.edmbc.mall.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rcv.mall.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.analytics.buy.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.analytics.mall.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.buy.yahoo.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cmp.p4pnet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cmp.shp.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ltm.buy.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.operate.buy.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tw.partner.buy.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tw.ptnr.yimg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partner.pr.buy.yahoo.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.campaign.bid.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.analytics.bid.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.promo.bid.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shp.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tw.buy.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.merchant.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.supplier.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bc.yahoo.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mobi.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.monday.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.livechat.yahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prime.yahoo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							01680077002979bef09e393921f056739f63a577e5be577d9c600af8f94d5d265c255dc7840000017d818918bb000004030048304602210083b82346fc6d0eda19f16210c14008c9e7efb2b741e2098a837c45c8389c88cc0221008a14d8e1f69b08b4b90f5357da24da900293556aaa2ce4244596307935db2f2800760041c8cab1df22464a10c6a13a0942875e4e318b1b03ebeb4bc768f090629606f60000017d818918f40000040300473045022100ddba34c8835b72b3baccd917db5191b8da1395e34fc22d395e783a8d42cfc601022003f89715a948d0fe40b47f4d6d4f8a8d7f0a1531a82854ae26fa52337e00dec7007500dfa55eab68824f1f6cadeeb85f4e3e5aeacda212a46a5e8e3b12c020445c2a730000017d818918fc000004030046304402204df89240b1454b079ee009d05be8d683e036819c766c110f54703afd06a0ca2402203e6f8482a9874a31c0947b06b9eada2116ddcebd17a537011d9ff4d5943ea11c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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