*.preview.www.huffpost.com

Issued by Amazon

About this certificate

This digital certificate with serial number 0c:54:a6:f7:f4:4f:79:a8:b3:98:12:74:dc:d8:81:a6 was issued on by Amazon.

With 78 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.preview.www.huffpost.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:54:a6:f7:f4:4f:79:a8:b3:98:12:74:dc:d8:81:a6
Serial Number (int): 16390275410496685250720305170391531942
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: b5:9d:cb:cf:a3:bd:67:62:ab:fe:ec:9f:a1:69:ca:61:61:9a:e7:94
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): fb:74:44:d8:8b:2f:13:ed:64:35:fb:43:4d:2e:2a:a1:1a:fa:15:17
Fingerprint (sha256): 00:bc:69:2f:17:c2:10:a9:99:3f:0e:c3:da:a9:dc:0f:32:16:8e:6b:98:e8:c8:48:45:66:26:1b:46:43:9e:5c

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate *.preview.www.huffpost.com

78

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.preview.www.huffpost.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.preview.www.huffpost.com
www.huffpost.com
*.preview.www.huffingtonpost.fr
*.preview.thespoils.huffpost.co.uk
m.huffingtonpost.com.au
*.www.huffingtonpost.kr
*.quebec.huffingtonpost.ca
m.huffingtonpost.it
*.www.huffingtonpost.ca
*.m.huffingtonpost.com.au
www.huffingtonpost.gr
quebec.huffingtonpost.ca
*.preview.www.huffingtonpost.jp
www.huffingtonpost.kr
m.huffingtonpost.es
www.huffingtonpost.com.au
*.www.huffingtonpost.fr
m.huffpost.com
*.preview.www.huffingtonpost.gr
*.m.huffingtonpost.es
*.preview.m.huffingtonpost.kr
*.preview.m.huffingtonpost.ca
*.m.huffingtonpost.it
www.huffingtonpost.fr
*.preview.www.huffingtonpost.kr
m.huffingtonpost.co.uk
www.huffingtonpost.co.uk
*.preview.www.huffingtonpost.ca
www.huffingtonpost.ca
*.www.huffingtonpost.gr
*.preview.m.huffingtonpost.gr
m.huffingtonpost.co.za
*.preview.m.huffingtonpost.jp
m.huffingtonpost.kr
m.quebec.huffingtonpost.ca
www.huffingtonpost.es
m.huffingtonpost.gr
*.m.huffingtonpost.fr
*.www.huffingtonpost.com
*.preview.m.huffpost.com
*.www.huffingtonpost.co.za
www.huffingtonpost.it
*.m.huffingtonpost.co.za
*.m.huffingtonpost.jp
*.preview.www.huffingtonpost.co.uk
*.preview.m.huffingtonpost.com.au
www.huffingtonpost.jp
*.www.huffpost.com
www.huffingtonpost.com
*.preview.m.quebec.huffingtonpost.ca
*.preview.www.huffingtonpost.com
www.huffingtonpost.co.za
*.preview.m.huffingtonpost.fr
*.preview.m.huffingtonpost.co.uk
*.preview.www.huffingtonpost.co.za
*.www.huffingtonpost.co.uk
m.huffingtonpost.ca
*.m.huffingtonpost.co.uk
*.thespoils.huffpost.co.uk
*.preview.www.huffingtonpost.it
*.www.huffingtonpost.jp
*.preview.quebec.huffingtonpost.ca
*.m.quebec.huffingtonpost.ca
*.preview.www.huffingtonpost.es
m.huffingtonpost.jp
*.m.huffingtonpost.gr
*.preview.www.huffingtonpost.com.au
m.huffingtonpost.fr
*.preview.m.huffingtonpost.co.za
*.m.huffingtonpost.kr
thespoils.huffpost.co.uk
*.m.huffingtonpost.ca
*.preview.m.huffingtonpost.es
*.www.huffingtonpost.it
*.www.huffingtonpost.es
*.preview.m.huffingtonpost.it
*.m.huffpost.com
*.www.huffingtonpost.com.au

Other certificates including the domain name huffpost.com

(limited to 100 certificates)
checkout.yahoo.com
qa5.add.my.aol.com
staging-origin-life.huffpo.net
preview.www.huffpost.com
*.preview.www.huffpost.com
qa.mapi.huffpost.com
coupons.huffpost.com
link.huffpost.com
*.aol.com
*.add.my.aol.com
checkout.yahoo.com
img.huffingtonpost.com
www.huffingtonpost.com
*.login.yahoo.com
consent.oath.com
*.dev.buzzfeed.io
cmp.huffpost.com
production.mapi.huffpost.com
img.staging.huffingtonpost.com
qa.mapi.huffpost.com
src5.yahoo.com
staging-origin-life.huffpo.net
beta-origin-cambria-alb.huffpo.net
staging.mapi.huffpost.com
staging.www.huffingtonpost.com
*.aol.com
stage.consent.oath.com
stage.guce2.oath.com
cmp.huffpost.com
production-kraken-valencia-preview.use1.huffpo.net
*.search.yahoo.com
secure.huffingtonpost.com
checkout.yahoo.com
link.huffpost.com
dev.checkout.yahoo.com
huffpost.com
qa.preview.www.huffpost.com
*.aol.com
stage.consent.oath.com
api.huffpost.com
link.huffpost.com
cmp.huffpost.com
*.dev.buzzfeed.io
*.trunk.login.yahoo.com
stage.consent.oath.com
cmp.huffpost.com
*.search.yahoo.com
stage.guce2.oath.com
modulous.huffpost.com
stage.oidc.oath.com
qa.preview.www.huffpost.com
stage.consent.oath.com
staging.www.huffingtonpost.com
www.huffpost.com
mapi.huffpost.com
*.stage.login.yahoo.com
auth.stage.huffpost.com
www.huffpost.com
dev.search.yahoo.com
origin-kraken.huffpo.net
beta-origin-cambria-alb.huffpo.net
se.emails.huffpost.com
*.search.yahoo.com
assist.aol.com
qa.preview.www.huffpost.com
www.huffingtonpost.com
*.login.yahoo.com
www.huffingtonpost.com
*.login.yahoo.com
beta.www.huffpost.com
modulous.huffpost.com
elections.huffingtonpost.com
src5.yahoo.com
src5.yahoo.com
*.aol.com
*.contributor.huffingtonpost.com
*.search.yahoo.com
cmp.huffpost.com
guce2.oath.com
origin-kraken.huffpo.net
src5.yahoo.com
checkout.yahoo.com
checkout.yahoo.com
stage.guce2.oath.com
*.assets.huffingtonpost.com
*.stage.login.yahoo.com
dev.checkout.yahoo.com
dev.checkout.yahoo.com
auth.stage.huffpost.com
trunk.consent.oath.com
*.stage.login.yahoo.com
dev.search.yahoo.com
se.emails.huffpost.com
*.stage.login.yahoo.com
*.search.yahoo.com
huffpost.com
stage.guce.huffpost.com
www.huffingtonpost.com
auth.huffpost.com
consent.oath.com

Certificate

The complete raw certificate details for *.preview.www.huffpost.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyugGt0jDXG/Oy95yigua
9U2zAB5riPaisDp0HdgHVWJsMObOP1ApzeJyCgL8thJVj2YUzo5abgtAKbZM5qu2
PNbEuArHOeZpGrjq6TvoBnmFNwx4nMEfwVGQG+petnSAKC2+UVYm724kt4LWHpuR
2DZsVJnD0TxvsLz013PzyGE15TfQ6bDPchF0B1KgiU0rS6A100S4e+T1DZZbpZoV
2Bt+CtB6hcWRjN2MW0eU7CxzP0lIT1Q3Ly/dcpabSdvG0lXC4WMIAeuLS+6DMhUB
YsceyGpzQsW7n0txVg4BPzapjSo2WS3lRynXVQsaYeuKYHFw5qfpogGFbGXL1El7
MQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16390275410496685250720305170391531942
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-20 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-05-19 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.preview.www.huffpost.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25614554003583245727902622708229679460247202435960156826494671977558852995802884531934507444322781477821911100314344222719934618835901313613315419040578879078512811156480364273596961713718189397974351691797614637744861023794779644853290095823554497897366001243236732313737158980413067734018969475949850019667052005420576417518490469295889729383494333822556966514150870716852451487110251222504346645010579523295199789567039077778336818531832192992327288807148396246203168789558044133137908601194102686938763475278446638030453078379524299226053690085726114559435310028345065973352188886582999054480856814895741010541361
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b59dcbcfa3bd6762abfeec9fa169ca61619ae794
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.preview.www.huffpost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.huffpost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.preview.www.huffingtonpost.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.preview.thespoils.huffpost.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.huffingtonpost.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.www.huffingtonpost.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.quebec.huffingtonpost.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.huffingtonpost.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.www.huffingtonpost.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.m.huffingtonpost.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.huffingtonpost.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quebec.huffingtonpost.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.preview.www.huffingtonpost.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.huffingtonpost.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.huffingtonpost.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.huffingtonpost.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.www.huffingtonpost.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.huffpost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.preview.www.huffingtonpost.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.m.huffingtonpost.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.preview.m.huffingtonpost.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.preview.m.huffingtonpost.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.m.huffingtonpost.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.huffingtonpost.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.preview.www.huffingtonpost.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.huffingtonpost.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.huffingtonpost.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.preview.www.huffingtonpost.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.huffingtonpost.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.www.huffingtonpost.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.preview.m.huffingtonpost.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.huffingtonpost.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.preview.m.huffingtonpost.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.huffingtonpost.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.quebec.huffingtonpost.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.huffingtonpost.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.huffingtonpost.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.m.huffingtonpost.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.www.huffingtonpost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.preview.m.huffpost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.www.huffingtonpost.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.huffingtonpost.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.m.huffingtonpost.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.m.huffingtonpost.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.preview.www.huffingtonpost.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.preview.m.huffingtonpost.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.huffingtonpost.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.www.huffpost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.huffingtonpost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.preview.m.quebec.huffingtonpost.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.preview.www.huffingtonpost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.huffingtonpost.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.preview.m.huffingtonpost.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.preview.m.huffingtonpost.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.preview.www.huffingtonpost.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.www.huffingtonpost.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.huffingtonpost.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.m.huffingtonpost.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thespoils.huffpost.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.preview.www.huffingtonpost.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.www.huffingtonpost.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.preview.quebec.huffingtonpost.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.m.quebec.huffingtonpost.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.preview.www.huffingtonpost.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.huffingtonpost.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.m.huffingtonpost.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.preview.www.huffingtonpost.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.huffingtonpost.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.preview.m.huffingtonpost.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.m.huffingtonpost.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thespoils.huffpost.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.m.huffingtonpost.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.preview.m.huffingtonpost.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.www.huffingtonpost.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.www.huffingtonpost.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.preview.m.huffingtonpost.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.m.huffpost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.www.huffingtonpost.com.au'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							01670076002979bef09e393921f056739f63a577e5be577d9c600af8f94d5d265c255dc78400000178f0d425910000040300473045022100a2a19dbf91f630b2cba46ab9757f02285e9bc91038f032373415c2e63066382b02202233a2ee3e25cb705d387873065cd4a3d07e96edfc110b0c984d419f435f629e0076002245450759552456963fa12ff1f76d86e0232663adc04b7f5dc6835c6ee20f0200000178f0d425d7000004030047304502204729290abfe914a83cc0d3a8a4a43ecca7fe8dc46d1e5014fc23712eaecaa602022100e0ccf2b28eb0defa2e438290097c228fefd90e188ed47b2b1683b10d80b8dda100750041c8cab1df22464a10c6a13a0942875e4e318b1b03ebeb4bc768f090629606f600000178f0d4258a0000040300463044022015e268b56950188a5c3ce87ab7c6f7ff2b6043ac5dd92af4c3626e516690da0d02206e75ec312bc58733619f68ac6db6f36e2b3b2fe5ce2ac9fbd2f0be935db400f5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00397df32e99214e36b8283f99230d25f4b383e4781b84902b7777c6d22b76feb41355f64c6c3ba0d9d4bf8e94c2ea0e3ceccecd8a11a3d95be358dd2bad48949c14ea47368cc95a316dfc0097a511292a9325f824d6fc91eb6677c56086556cb8b51de68c951b6c5e668de8a517bb5b1408bdd621e1bfa93429a9669e8454a14103d929c2ee2effcbe32a2461c35d8a9cf30e9f61186539f9ebf7e985d0eaa220906a3f7e047242ebe1bf67534846309aef4a4331b603b53d66cf859e19eecf2bc12746fa377ee3a578835457e502acbcefe44c33c79c8df3c6418f353c4e454614dc4e58f043f8ad797c297865f0811a87eb23f3f9a145f1b9dfcdcc8c52855b