hearst-uk.map.fastly.net

- Fastly, Inc. -

Issued by GlobalSign CloudSSL CA - SHA256 - G3

About this certificate

This digital certificate with serial number 72:96:4a:1d:c5:88:76:83:25:e9:c7:d0 was issued on by GlobalSign nv-sa.

With 108 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Fastly, Inc.

Organization: Fastly, Inc.
State / Province: California
Locality: San Francisco
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 72:96:4a:1d:c5:88:76:83:25:e9:c7:d0
Serial Number (int): 35462979996884599630107101136
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 33:d4:8c:3e:6e:cc:bd:09:fb:9d:5c:fb:a6:68:5f:59:dd:5e:2a:33
AuthorityKeyId: a9:2b:87:e1:ce:24:47:3b:1b:bf:cf:85:37:02:55:9d:0d:94:58:e6

Fingerprint (sha1): 01:67:85:e1:17:ca:5e:e8:24:d6:94:8f:07:e7:d7:6a:1e:b5:14:96
Fingerprint (sha256): 04:bd:e7:22:50:d2:f0:8f:3a:df:77:04:00:e1:52:59:3e:85:fe:60:ee:c3:84:a1:5f:6a:a3:84:59:ea:d3:d4

Issuing Certificate URL: http://secure.globalsign.com/cacert/cloudsslsha2g3.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/cloudsslsha2g3

Check the revocation status for certificate hearst-uk.map.fastly.net

108

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for hearst-uk.map.fastly.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

hearst-uk.map.fastly.net
*.asdagoodliving.co.uk
*.bazaarartweek.co.uk
*.bazaarsummit.co.uk
*.bicycling.nl
*.blogs.diezminutos.es
*.cdnds.net
*.cosmopolitan.co.uk
*.cosmopolitan.it
*.countryliving.co.uk
*.crecerfeliz.es
*.diezminutos.es
*.digitalspy.co.uk
*.digitalspy.com
*.elle.co.jp
*.elle.it
*.elledecor.it
*.elledecoration.co.uk
*.elleeten.nl
*.elleuk.com
*.elleweekender.co.uk
*.emprendedores.es
*.esquire.co.uk
*.financiallyfabulous.co.uk
*.fotogramas.es
*.gearpatrol.com
*.gioia.it
*.glamour.nl
*.goodhousekeeping.co.uk
*.harpersbazaar.co.uk
*.hdigital.net
*.hearst.co.uk
*.hearstgames.com
*.hearstgames.net
*.housebeautiful.co.uk
*.insidesoap.co.uk
*.jan-magazine.nl
*.marieclaire.it
*.menshealth.co.uk
*.menshealth.nl
*.micasarevista.com
*.netdoctor.co.uk
*.prima.co.uk
*.quemedices.es
*.quest.nl
*.quo.es
*.quotenet.nl
*.redonline.co.uk
*.runnersweb.nl
*.runnersworld.co.uk
*.townandcountrymag.co.uk
*.vogue.nl
*.womenshealthmag.co.uk
*.womenshealthmag.nl
asdagoodliving.co.uk
bazaarartweek.co.uk
bazaarsummit.co.uk
bicycling.com
bicycling.nl
blogs.diezminutos.es
cdnds.net
cosmopolitan.it
countryliving.co.uk
crecerfeliz.es
diezminutos.es
digitalspy.co.uk
digitalspy.com
elle.co.jp
elle.it
elledecor.it
elledecoration.co.uk
elleeten.nl
elleuk.com
elleweekender.co.uk
emprendedores.es
esquire.co.uk
financiallyfabulous.co.uk
fotogramas.es
gearpatrol.com
gioia.it
glamour.nl
goodhousekeeping.co.uk
harpersbazaar.co.uk
hearst.co.uk
housebeautiful.co.uk
insidesoap.co.uk
jan-magazine.nl
marieclaire.it
menshealth.co.uk
menshealth.com
menshealth.nl
micasarevista.com
netdoctor.co.uk
prevention.com
prima.co.uk
quemedices.es
quest.nl
quo.es
quotenet.nl
redonline.co.uk
runnersweb.nl
runnersworld.co.uk
runnersworld.com
townandcountrymag.co.uk
vogue.nl
womenshealthmag.co.uk
womenshealthmag.com
womenshealthmag.nl

Other certificates including the domain name hearst-uk.map.fastly.net

(limited to 100 certificates)
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net

Certificate

The complete raw certificate details for hearst-uk.map.fastly.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1wkjwQFAk9qG2wTvXjZ2
MLwe2kDHjWGhrI4uKVtC9didyiAC0Dp0P4M4OEka1oxDrC7bFkEw30dZ4FKfwoZl
TdoZMegGq+6ItwW0XIkq91a9HT1r4udzFpi3XyQeE0rCLFem8uDaT4IOv3HNfZnQ
HYPjw++1wfGNr5rHWQozwtnjz+wpVeuxgXmt3hfQmSoOWsbkYNYivMa0RK2a6pRR
Gkc89J9V2wzS4BSHbRZBjGGO7K0ANK9Qrf7sS5jM5JRCqMMGHXsn4LEdNA9LKI9s
sGcuPKFH04tmV/ODlmrx5xeVskVndEBMEiYYUyFM24C18vsIdqZq/OhRQ3xdDrL6
1wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 35462979996884599630107101136
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign CloudSSL CA - SHA256 - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-18 14:52:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-28 19:50:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Fastly, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'hearst-uk.map.fastly.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27145742503883860879295111240660768133943789425859644201735974503250285556391814149862271421630387286091984455657243519185205060771184275249916416297506115778609108301145600479893886924159553765682457796447167197230967797380615458676111260389153827188332942801943181170300506289541081436699489243726231842383667126483903712043105372317447598553238717765759958385357622135313198682693534306565945200263532599551496777888252680316496995565372073635363362109966500045451952587452383471677486235083226277705165858404617150488593628668320767510868763124050485072221792392333480147731516388586496346107260787215035457010391
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/cloudsslsha2g3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/cloudsslsha2g3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1930 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hearst-uk.map.fastly.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.asdagoodliving.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bazaarartweek.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bazaarsummit.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bicycling.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blogs.diezminutos.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cdnds.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cosmopolitan.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cosmopolitan.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.countryliving.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.crecerfeliz.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.diezminutos.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.digitalspy.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.digitalspy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elle.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elle.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elledecor.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elledecoration.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elleeten.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elleuk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elleweekender.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.emprendedores.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.esquire.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.financiallyfabulous.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fotogramas.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gearpatrol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gioia.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.glamour.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.goodhousekeeping.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.harpersbazaar.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hdigital.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hearst.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hearstgames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hearstgames.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.housebeautiful.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.insidesoap.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jan-magazine.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.marieclaire.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.menshealth.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.menshealth.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.micasarevista.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.netdoctor.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prima.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.quemedices.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.quest.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.quo.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.quotenet.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.redonline.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.runnersweb.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.runnersworld.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.townandcountrymag.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vogue.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.womenshealthmag.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.womenshealthmag.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asdagoodliving.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bazaarartweek.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bazaarsummit.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bicycling.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bicycling.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blogs.diezminutos.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdnds.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cosmopolitan.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'countryliving.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crecerfeliz.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diezminutos.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalspy.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalspy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elle.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elle.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elledecor.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elledecoration.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elleeten.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elleuk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elleweekender.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emprendedores.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esquire.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'financiallyfabulous.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fotogramas.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gearpatrol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gioia.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glamour.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goodhousekeeping.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harpersbazaar.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hearst.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'housebeautiful.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insidesoap.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jan-magazine.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marieclaire.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'menshealth.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'menshealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'menshealth.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'micasarevista.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netdoctor.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prevention.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prima.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quemedices.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quest.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quo.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quotenet.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redonline.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'runnersweb.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'runnersworld.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'runnersworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'townandcountrymag.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vogue.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'womenshealthmag.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'womenshealthmag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'womenshealthmag.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							33d48c3e6eccbd09fb9d5cfba6685f59dd5e2a33
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a92b87e1ce24473b1bbfcf853702559d0d9458e6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f00000167c1cda29c000004030047304502207458b9c7ae7c419d3474d5b734a0e5e99750b2580cf48bfa66bf4c26b7c6b9bc022100b23c61592c6171806a50a3750db559d062a4d96c580c506636471255dabb8a87007500a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc1000000167c1cda35d00000403004630440220223876637c42e09efde7467939877122e342c3356d8c52ca99a1b318454db0e102205acab946b66f0395f7b2f5fad8dc10838bdfc5fe26d9461b74a54379d0616fd0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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