ap.org

- The Associated Press -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 01:c0:2b:2b:5e:d3:66:ab:ec:f6:5c:cd:81:79:23:6c was issued on by DigiCert Inc.

With 85 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

The Associated Press

Organization: The Associated Press
State / Province: New York
Locality: New York
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 01:c0:2b:2b:5e:d3:66:ab:ec:f6:5c:cd:81:79:23:6c
Serial Number (int): 2327024572394707036770958208755377004
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: cb:ec:e5:19:69:7a:89:2c:04:5f:6b:7c:35:9d:4d:5c:85:64:7a:6c
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): 63:da:6d:3e:60:72:4a:c6:2d:81:3a:99:4d:f2:ba:7c:33:a6:8b:5a
Fingerprint (sha256): ec:e6:53:26:61:49:c7:50:e9:95:0c:95:49:68:38:3b:90:67:c8:02:ec:ff:de:8e:49:dc:57:e4:09:3b:00:7f

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate ap.org

85

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ap.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ap.org
ai.ap.org
aparchive.com
aphelp.ap.org
apimages.ap.org
apimages.com
applanner.com
aptop25.com
apvc.ap.org
apvc2.ap.org
apvideohub.ap.org
apvotecount.ap.org
apvotecount2.ap.org
backup.ap.org
bigstory.ap.org
binaryapi.ap.org
blog.ap.org
brand.ap.org
careers.ap.org
classic.apimages.com
collegebasketball.ap.org
collegebasketballdev.ap.org
collegebasketballqa.ap.org
collegefootball.ap.org
customersupport.ap.org
cvpa10.ap.org
cvpa20.ap.org
digitalservices.ap.org
digitalservicesdev.ap.org
digitalservicesqa.ap.org
dne.ap.org
download.apassignments.com
download.apmultimedianewsroom.com
elections.ap.org
electionsdev.ap.org
electionsstage.ap.org
hosted.ap.org
hostedqa.ap.org
inside.ap.org
insights.ap.org
interactives-dev.ap.org
interactives-qa.ap.org
interactives-staging.ap.org
interactives.ap.org
interactives.aptechdevlab.com
interactives.aptechlab.com
interactives.associatedpress.com
interactivesqa.ap.org
interactivesqa1.ap.org
leads.ap.org
login.ap.org
mail-ctc.ap.org
mail-lon.ap.org
newsroom.ap.org
openings.ap.org
poll.ap.org
polls.ap.org
preview.apvideohub.ap.org
preview.newsroom.ap.org
pro32.ap.org
pro32qa.ap.org
pronto.ap.org
racing.ap.org
roam.ap.org
securedrop.ap.org
summergames.ap.org
syndication.ap.org
videoproduction.ap.org
webfeeds.ap.org
webmail.ap.org
wfm.ap.org
wfpreview.ap.org
wintergames.ap.org
www.aparchive.com
www.apexchange.com
www.apimages.com
www.applanner.com
www.aptop25.com
www.apvideous.com
www.collegebasketball.ap.org
www.collegefootball.ap.org
www.elections.ap.org
www.pro32.ap.org
www.racing.ap.org
www.wintergames.ap.org

Other certificates including the domain name ap.org

(limited to 100 certificates)
feedback.ap.org
ervaring.nedvice.nl
ervaring.nedvice.nl
playbook.ap.org
ervaring.nedvice.nl
www.ap.org
help.ap.org
nycwlcdmz1.ap.org
ap.org
apipreview.ap.org
careers.ap.org
appbnom11.ap.org
ervaring.nedvice.nl
ctchive01.ap.org
inside.ap.org
cwa-ctc.ap.org
ap.org
partners.apvideohub.ap.org
discover.ap.org
ASSP-EXPC-P.ap.org
ap.org
ap.org
epix.ap.org
mail-ctc.ap.org
ap.org
ap.org
ervaring.nedvice.nl
backup.ap.org
ervaring.nedvice.nl
eapws.ap.org
developer.ap.org
ervaring.nedvice.nl
datakit.ap.org
login.ap.org
kibana.associatedpress.com
api.ap.org
DeveloperAPIPreview.ap.org
ap.org
blog.ap.org
docs.workflow.ap.org
sunshine.ap.org
ipdlonbackhaul.ap.org
approdpbnom11.ap.org
careers.ap.org
easyvista.ap.org
ap.org
ssrpm.ap.org
vault.ap.org
tokive01.ap.org
login.ap.org
ctcgsscasper01.ap.org
ap.org
easyvista.ap.org
crmgw.ap.org
api.ap.org
ervaring.nedvice.nl
ervaring.nedvice.nl
preview.apvideohub.ap.org
ervaring.nedvice.nl
ap.org
sunshine.ap.org
store.ap.org
store.ap.org
origin.hosted.ap.org
ap.org
ap.org
blog.ap.org
store.ap.org
tokive01.ap.org
ap.org
approdpbnom12.ap.org
apipreview.ap.org
ap.org
apvideohub.ap.org
Developerapi.ap.org
eapadmin2.ap.org
ervaring.nedvice.nl
mysap.ap.org
blog.ap.org
discover.ap.org
inside.ap.org
wfm.ap.org
ap.org
discover.ap.org
IMSIPAPGW01.ap.org
ap.org
api-qa.ap.org
ap.org
partners.apvideohub.ap.org
blog.ap.org
store.ap.org
apvideohub.ap.org
sports.ap.org
bejive01.ap.org
discover.ap.org
gamestream.ap.org
apipreview.ap.org
ervaring.nedvice.nl
discover.ap.org
tokive01.ap.org

Certificate

The complete raw certificate details for ap.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnhy9qhDZbPXgWI15tFiQ
LY2wndF2C5Ly5Z7VEVaRPYKuuH+UwIltZ6KitYCHoL8KQYACVMQ//S2/qHNU8mYW
VcOZBpf+DiIQv19FJxF5ULtwie++5NnACkbM+mAnek2Vgukrd68Gvasva8SQt2Bo
pLyJhksc62smtecOs1jipEuV+9rkHLX5CxUXwnuR+tL4PaTS5l9TsxdlTwQaLDC8
PjCq9dCJiVrplhHFlGYAO2m8oRGkwFpcX0qGLZ/clFOZxiclotd5cQ7QKNhMu91X
cJImzfVq5/AIP7Py8sVwfJjyPSAO7fg01C3kheKdJTrsJeYrAGfajBGxq6zX7y4I
QwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2327024572394707036770958208755377004
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-04 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-06 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'The Associated Press'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ap.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19959824838937426785964877259001764810367060182156629856795637478926529207856477961131988478581063093151288776967638555159709818768728293458879451132873434068594636519038624181811755300650146184965864320327452800406508426067173183201768173039488369484786546916431276175712773404930633032996696307787698522922701206659941597508369633112440366003718642099546195954081888045356196582832953453051935519244792781210355818627448358777526149491272130245391970634997092150630563505648424877409096856587430317248718600376724286155285253770070878936488640095064035539370733121490899038736129401706027759982018437370877313943619
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cbece519697a892c045f6b7c359d4d5c85647a6c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1659 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ai.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aparchive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aphelp.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apimages.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apimages.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'applanner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aptop25.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apvc.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apvc2.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apvideohub.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apvotecount.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apvotecount2.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backup.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bigstory.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'binaryapi.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brand.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'careers.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'classic.apimages.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collegebasketball.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collegebasketballdev.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collegebasketballqa.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collegefootball.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customersupport.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cvpa10.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cvpa20.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalservices.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalservicesdev.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalservicesqa.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dne.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'download.apassignments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'download.apmultimedianewsroom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elections.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'electionsdev.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'electionsstage.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hosted.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hostedqa.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inside.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insights.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'interactives-dev.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'interactives-qa.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'interactives-staging.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'interactives.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'interactives.aptechdevlab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'interactives.aptechlab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'interactives.associatedpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'interactivesqa.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'interactivesqa1.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leads.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail-ctc.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail-lon.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsroom.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'openings.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poll.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'polls.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preview.apvideohub.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preview.newsroom.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pro32.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pro32qa.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pronto.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'racing.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roam.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securedrop.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'summergames.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'syndication.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'videoproduction.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webfeeds.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wfm.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wfpreview.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wintergames.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aparchive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.apexchange.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.apimages.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.applanner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aptop25.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.apvideous.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.collegebasketball.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.collegefootball.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elections.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pro32.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.racing.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wintergames.ap.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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