api.canvas.adtech.com
- ADTECH AG -
Issued by AOL Member CA
About this certificate
This digital certificate with serial number e6:75:09:2e:74:00:06:da:aa:3d:88:31:49:9d:1a:97 was issued on by America Online Inc..
With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- Subscriber certificates authorityInformationAccess extension should contain the HTTP URL of the issuing CA’s certificate (BRs: 7.1.2.3)
ADTECH AG
Organization:
ADTECH AG
State / Province:
Hessen
Locality: Frankfurt
Country: DE
Locality: Frankfurt
Country: DE
America Online Inc.
Organization:
America Online Inc.
State / Province:
Virginia
Locality: Dulles
Country: US
Locality: Dulles
Country: US
This certificate has expire since
Certificate Details
Serial Number (hex): e6:75:09:2e:74:00:06:da:aa:3d:88:31:49:9d:1a:97Serial Number (int): 306330123985061427628739280727206337175
Serial Number lenght: 128 bits, 16 octets
SubjectKeyId: 40:11:eb:1c:89:46:f1:0f:94:08:fb:74:5e:a9:20:d4:7b:e8:ed:2b
AuthorityKeyId: 61:a6:99:6d:24:9f:0e:11:88:e6:39:e0:fe:74:d1:05:69:52:a9:43
Fingerprint (sha1): 49:60:ea:00:b3:98:72:3c:96:5c:03:64:29:8f:8a:f3:a0:82:8d:39
Fingerprint (sha256): f2:32:cb:cd:2f:a0:56:4e:33:fd:e9:99:9b:ea:46:f1:05:c1:8f:32:68:93:76:a1:36:fe:94:82:fb:61:65:8d
Revocation information
OCSP Server: http://ocsp.web.aol.com/ocspCRL Distribution Point: http://crl.aol.com/AOLMSPKI/aolServerCert.crl
Check the revocation status for certificate api.canvas.adtech.com
3
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for api.canvas.adtech.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA1 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
api.canvas.adtech.com
api.canvas-qa.adtech.com
api.canvas-stage.adtech.com
api.canvas-qa.adtech.com
api.canvas-stage.adtech.com
Other certificates including the domain name adtech.com
(limited to 100 certificates)
onebyaol.com
spacewalk.prod.adtech.aolcloud.net
spacewalk.eu-fra.adtech.com
dev-scheduler001.eu-fra.adtech.com
jenkins001.us-ec.adtech.com
zenoss.adtech.com
api.canvas-qa.adtech.com
jira.adtech.com
canvas-qa.adtech.com
canvas-stage.adtech.com
newfront.aol.com
scheduler003.us-ec.adtech.com
research.adtech.com
canvas-stage.adtech.com
canvas.adtech.com
spacewalk.prod.adtech.aolcloud.net
spacewalk.prod.adtech.aolcloud.net
spacewalk-proxy001.eu-fra.adtech.com
spacewalk.eu-fra.adtech.com
spacewalk.us-ec.adtech.com
api.canvas.adtech.com
wdm.adtech.com
build-cpp.eu-fra.adtech.com
spacewalk.adtech.com
spacewalk.prod.adtech.aolcloud.net
spacewalk.prod.adtech.aolcloud.net
qa-scheduler003.eu-fra.adtech.com
scheduler003.us-ec.adtech.com
spacewalk.prod.adtech.aolcloud.net
qaa-scheduler003.eu-fra.adtech.com
cstest.adtech.com
*.eu-fra.adtech.com
cstest.adtech.com
ansible-jenkins001.us-ec.adtech.com
api.canvas-stage.adtech.com
spacewalk.scd.us.adtech.com
spacewalk.toy.as.adtech.com
spacewalk.prod.adtech.aolcloud.net
spacewalk.eu-amt.adtech.com
canvas.adtech.com
ansible-jenkins002.us-ec.adtech.com
qa-scheduler003.eu-fra.adtech.com
scheduler001.eu-fra.adtech.com
ersa-api.us-ec.adtech.com
onebyaol.com
*.eu-fra.adtech.com
spacewalk.us-ec.adtech.com
svn.adtech.de
spacewalk.prod.adtech.aolcloud.net
classic-aerospike.us-ec.adtech.com
dev-scheduler003.eu-fra.adtech.com
mail.advertising.com
intranet.adtech.com
api.canvas.adtech.com
spacewalk.prod.adtech.aolcloud.net
spacewalk.eu-fra.adtech.com
dev-scheduler001.eu-fra.adtech.com
jenkins001.us-ec.adtech.com
zenoss.adtech.com
api.canvas-qa.adtech.com
jira.adtech.com
canvas-qa.adtech.com
canvas-stage.adtech.com
newfront.aol.com
scheduler003.us-ec.adtech.com
research.adtech.com
canvas-stage.adtech.com
canvas.adtech.com
spacewalk.prod.adtech.aolcloud.net
spacewalk.prod.adtech.aolcloud.net
spacewalk-proxy001.eu-fra.adtech.com
spacewalk.eu-fra.adtech.com
spacewalk.us-ec.adtech.com
api.canvas.adtech.com
wdm.adtech.com
build-cpp.eu-fra.adtech.com
spacewalk.adtech.com
spacewalk.prod.adtech.aolcloud.net
spacewalk.prod.adtech.aolcloud.net
qa-scheduler003.eu-fra.adtech.com
scheduler003.us-ec.adtech.com
spacewalk.prod.adtech.aolcloud.net
qaa-scheduler003.eu-fra.adtech.com
cstest.adtech.com
*.eu-fra.adtech.com
cstest.adtech.com
ansible-jenkins001.us-ec.adtech.com
api.canvas-stage.adtech.com
spacewalk.scd.us.adtech.com
spacewalk.toy.as.adtech.com
spacewalk.prod.adtech.aolcloud.net
spacewalk.eu-amt.adtech.com
canvas.adtech.com
ansible-jenkins002.us-ec.adtech.com
qa-scheduler003.eu-fra.adtech.com
scheduler001.eu-fra.adtech.com
ersa-api.us-ec.adtech.com
onebyaol.com
*.eu-fra.adtech.com
spacewalk.us-ec.adtech.com
svn.adtech.de
spacewalk.prod.adtech.aolcloud.net
classic-aerospike.us-ec.adtech.com
dev-scheduler003.eu-fra.adtech.com
mail.advertising.com
intranet.adtech.com
api.canvas.adtech.com
Certificate
The complete raw certificate details for api.canvas.adtech.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIRAOZ1CS50AAbaqj2IMUmdGpcwDQYJKoZIhvcNAQEFBQAw ZzELMAkGA1UEBhMCVVMxETAPBgNVBAgTCFZpcmdpbmlhMQ8wDQYDVQQHEwZEdWxs ZXMxHDAaBgNVBAoTE0FtZXJpY2EgT25saW5lIEluYy4xFjAUBgNVBAMTDUFPTCBN ZW1iZXIgQ0EwHhcNMTIxMjE3MTU0OTIxWhcNMTQxMjE3MTU0OTIxWjBmMQswCQYD VQQGEwJERTEPMA0GA1UECAwGSGVzc2VuMRIwEAYDVQQHDAlGcmFua2Z1cnQxEjAQ BgNVBAoMCUFEVEVDSCBBRzEeMBwGA1UEAwwVYXBpLmNhbnZhcy5hZHRlY2guY29t MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0TIJwtMD5ejfqBhcSVG UmiVxJL7QtLECTaVsRc51tT4U67CxhdjO4cAsgyRVAv4vuwfbvIhx792sL6p4U9U yLbk9zNlS2DAOSIaunC6HhnLBqP/2tP0umtylAgoi/8DlPbgOodD+pJ0aBkOtZN6 AJy74e9/4rQOcBwOQhiqggESIC4MHVNLqLjv6T9N4RnHzWAHEnvoxVSdL8n5xq1m fLkiggwhw1Bx6Hkc1I5x2yr3oTrND1EAFosz5u5HQT/u3fW568OfVF1NzxMBwKXk 1qDOvV+bZ2Bpk8OnUGws/HC9Rb/nTTO9iWyLsZDWpKlcw9ymuYSj50rsdDbEB/Zf UQIDAQABo4IBqTCCAaUwHwYDVR0jBBgwFoAUYaaZbSSfDhGI5jng/nTRBWlSqUMw DgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA+ BgNVHR8ENzA1MDOgMaAvhi1odHRwOi8vY3JsLmFvbC5jb20vQU9MTVNQS0kvYW9s U2VydmVyQ2VydC5jcmwwOAYIKwYBBQUHAQEELDAqMCgGCCsGAQUFBzABhhxodHRw Oi8vb2NzcC53ZWIuYW9sLmNvbS9vY3NwMFcGA1UdEQRQME6CFWFwaS5jYW52YXMu YWR0ZWNoLmNvbYIYYXBpLmNhbnZhcy1xYS5hZHRlY2guY29tghthcGkuY2FudmFz LXN0YWdlLmFkdGVjaC5jb20wCQYDVR0TBAIwADBWBgNVHSAETzBNMEsGDisGAQQB iCoBh2gBAAICMDkwNwYIKwYBBQUHAgEWK2h0dHA6Ly9wa2ktaW5mby5hb2wuY29t L0FPTE1TUEtJL2luZGV4Lmh0bWwwHQYDVR0OBBYEFEAR6xyJRvEPlAj7dF6pINR7 6O0rMA0GCSqGSIb3DQEBBQUAA4IBAQAgnGHEcaQXiQg07QAQjiv6FGNIxG4uWScQ qfj0D4K+xL/QsxkugiBANoDKrlSNx2AqblPPLO9FEJabLHAlpUKAvh7fuPNVUXwR yPuyntiu7SUWv7f/CjGEcMKKkzmH108hHfR/Gcdr+IBs7htgzRprrt9e3+6H7Zxr hXguwhrhwN3G1KfhgtwW2qY2nic5EEU59mcovZzPyw1l064UHelnxETQLS9VqFWG Ub34GexcWX4RxOTTgt+Erd0EE26poDXNbQaYCy+LmCZN6tbxfkipc9OBF4TGMxnE yj6yuvjal0rQM7u6Y+KK9v+AaaafOIBHzrFfTU1VXjSrnO6zk71k -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0TIJwtMD5ejfqBhcSVG UmiVxJL7QtLECTaVsRc51tT4U67CxhdjO4cAsgyRVAv4vuwfbvIhx792sL6p4U9U yLbk9zNlS2DAOSIaunC6HhnLBqP/2tP0umtylAgoi/8DlPbgOodD+pJ0aBkOtZN6 AJy74e9/4rQOcBwOQhiqggESIC4MHVNLqLjv6T9N4RnHzWAHEnvoxVSdL8n5xq1m fLkiggwhw1Bx6Hkc1I5x2yr3oTrND1EAFosz5u5HQT/u3fW568OfVF1NzxMBwKXk 1qDOvV+bZ2Bpk8OnUGws/HC9Rb/nTTO9iWyLsZDWpKlcw9ymuYSj50rsdDbEB/Zf UQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 306330123985061427628739280727206337175 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Virginia' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Dulles' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'America Online Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AOL Member CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2012-12-17 15:49:21 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-12-17 15:49:21 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Hessen' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Frankfurt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'ADTECH AG' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'api.canvas.adtech.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21620667741469280703870737646246996282730622533744363250988367771817070225040622267002321847036419734860595209773619053522249013976488519761215956744221739726016576375836152671967362800631867291098262429565917631082952488072361954238450598044603656661304569296031103952847409307810060178707398961784234369514818645706391133168303671768002771693268925814740800768971095694932117020734175038389363583226092561808134479410838587996333716750343397051874062238241400649796480463166359582240591593928740741624761938134358336548847460173827291030150155510990673616097888133913371719232115436855348401729997683640088560820049 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 61a6996d249f0e1188e639e0fe74d1056952a943 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.aol.com/AOLMSPKI/aolServerCert.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.web.aol.com/ocsp' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.canvas.adtech.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.canvas-qa.adtech.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.canvas-stage.adtech.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.1066.1.1000.1.0.2.2 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://pki-info.aol.com/AOLMSPKI/index.html' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 4011eb1c8946f10f9408fb745ea920d47be8ed2b . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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