www.pugpig.com

- Kaldor Ltd -

Issued by GlobalSign CloudSSL CA - SHA256 - G3

About this certificate

This digital certificate with serial number 7a:b5:62:ee:ba:cd:89:c6:72:75:25:8e was issued on by GlobalSign nv-sa.

With 104 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Kaldor Ltd

Organization: Kaldor Ltd
State / Province: London
Locality: London
Country: GB

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 7a:b5:62:ee:ba:cd:89:c6:72:75:25:8e
Serial Number (int): 37976453967255323379846423950
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: e8:ea:c1:1a:7c:39:d3:8d:5f:ad:ef:41:ce:df:45:57:a0:2e:2b:6f
AuthorityKeyId: a9:2b:87:e1:ce:24:47:3b:1b:bf:cf:85:37:02:55:9d:0d:94:58:e6

Fingerprint (sha1): 3d:b4:f3:c7:25:15:88:c8:c1:4c:3c:22:54:fd:e1:eb:76:31:ce:c4
Fingerprint (sha256): 0a:54:41:fe:63:7f:38:54:f9:52:bd:0f:8c:a8:5e:b3:72:e0:0f:4c:63:47:06:f3:a6:ed:48:8d:cb:59:f3:c7

Issuing Certificate URL: http://secure.globalsign.com/cacert/cloudsslsha2g3.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/cloudsslsha2g3

Check the revocation status for certificate www.pugpig.com

104

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.pugpig.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.pugpig.com
*.content.pugpig-dev.com
*.content.pugpig-stage.com
*.content.pugpig.com
*.pugpig.com
abafrica.accaglobal.com
app.bridesmagazine.co.uk
app.chemistryworld.com
app.cntraveller.com
app.esg-magazine.com
app.estatesgazette.com
app.futurefarming.com
app.glamourmagazine.co.uk
app.gqstyle.co.uk
app.healthinvestor.co.uk
app.historytoday.com
app.houseandgarden.co.uk
app.legalweek.com
app.lqgroup.org.uk
app.spectator.com.au
app.tatler.com
app.tfreview.com
app.thepsychologist.bps.org.uk
app.towpathtalk.co.uk
app.vogue.co.uk
app.wired.co.uk
app.worldofinteriors.co.uk
appuk.futurefarming.com
dareapp.superdrug.com
desktop.motorsportmagazine.com
edition.independent.co.uk
edition.thestage.co.uk
editorial.inese.es
energyrisk.app.incisivemedia.com
finreader.flightglobal.com
fxweek.app.incisivemedia.com
guides.which.co.uk
homelife.lqgroup.org.uk
hsj.cdn.wilmingtonplc.com
imd.app.incisivemedia.com
insuranceage.app.incisivemedia.com
insurancehoundbroking.app.incisivemedia.com
insurancehoundclaims.app.incisivemedia.com
insurancehoundtechnology.app.incisivemedia.com
international-reader.firstnews.co.uk
jamiemagazine.hdigital.net
journal.isca.org.sg
mag.asiana.tv
magazine.co-operativefood.co.uk
magazine.cyclist.co.uk
magazine.evo.co.uk
magazine.mensfitness.co.uk
magazine.physicstoday.org
magazine.slimmingworld.com
magazine.tennishead.net
magazine.theamorist.co.uk
magazine.theglobalrecruiter.com
magazine.theweek.co.uk
magazine.which.co.uk
magazines.rsc.org
news.which.co.uk
newsstandapp.investorschronicle.co.uk
operationalrisk.app.incisivemedia.com
post.app.incisivemedia.com
puzzlerextra.com
read.allaboutsoap.co.uk
read.astronomynow.com
read.bestmagazine.co.uk
read.cosmopolitan.co.uk
read.countryliving.co.uk
read.elledecoration.co.uk
read.elleuk.com
read.esquire.co.uk
read.goodhousekeeping.co.uk
read.harpersbazaar.co.uk
read.housebeautiful.co.uk
read.insidesoap.co.uk
read.menshealth.co.uk
read.notionmagazine.com
read.prima.co.uk
read.primal9.menshealth.co.uk
read.realpeoplemag.co.uk
read.redonline.co.uk
read.reveal.co.uk
read.runnersworld.co.uk
read.townandcountrymag.co.uk
read.womenshealthmag.co.uk
reader.affarsvarlden.se
reader.boatinternational.com
reader.filmcomment.com
reader.flightglobal.com
reader.fwi.co.uk
reader.motohead.co.uk
reader.nyteknik.se
reader.poetrymagazine.org
reader.sourcetoday.com
retail-week.cdn.ascential.com
risk.app.incisivemedia.com
riskeditions.app.incisivemedia.com
riskjournals.app.incisivemedia.com
shareholder.share.com
waters.app.incisivemedia.com
weekly.morebikes.co.uk
pugpig.com

Other certificates including the domain name pugpig.com

(limited to 100 certificates)
www.pugpig.com
www2.pugpig.com
attstatus.snowflake.com
attstatus.snowflake.com
*.express.pugpig.com
dns-vetting1i.map.fastly.net
www3.pugpig.com
*.financialtimes.pro.pugpig.com
www.pugpig.com
*.site.pugpig.com
www.pugpig.com
attstatus.snowflake.com
www3.pugpig.com
*.condenastgb.pro.pugpig.com
j.ssl.fastly.net
www2.pugpig.com
attstatus.snowflake.com
attstatus.snowflake.com
attstatus.snowflake.com
j.ssl.fastly.net
*.condenastgb.pro.pugpig.com
www.pugpig.com
*.springwise.pro.pugpig.com
attstatus.snowflake.com
dns-vetting1i.map.fastly.net
www2.pugpig.com
www2.pugpig.com
*.express.pugpig.com
attstatus.snowflake.com
j.ssl.fastly.net
attstatus.snowflake.com
www2.pugpig.com
www2.pugpig.com
www.pugpig.com
www.pugpig.com
www3.pugpig.com
*.content.pugpig-dev.com
www2.pugpig.com
dns-vetting1i.map.fastly.net
www3.pugpig.com
www2.pugpig.com
www2.pugpig.com
attstatus.snowflake.com
attstatus.snowflake.com
www2.pugpig.com
j.ssl.fastly.net
*.condenastus.pro.pugpig.com
www.pugpig.com
*.hearst.pro.pugpig.com
www.pugpig.com
*.qawordpress.pro.pugpig.com
*.sirlinkalot.pro.pugpig.com
attstatus.snowflake.com
*.qawordpress.pro.pugpig.com
*.content.pugpig-dev.com
attstatus.snowflake.com
dns-vetting1i.map.fastly.net
www2.pugpig.com
dns-vetting1i.map.fastly.net
www.pugpig.com
*.condenastgb.pro.pugpig.com
www2.pugpig.com
www2.pugpig.com
dns-vetting1i.map.fastly.net
www2.pugpig.com
www2.pugpig.com
dns-vetting1i.map.fastly.net
pugpig.com
www.pugpig.com
www3.pugpig.com
dmgt.pro.pugpig.com
www.pugpig.com
www2.pugpig.com
www2.pugpig.com
attstatus.snowflake.com
www.pugpig.com
www.pugpig.com
www2.pugpig.com
admin.pugpig.com
www2.pugpig.com
attstatus.snowflake.com
www.pugpig.com
*.sirlinkalot.pro.pugpig.com
*.content.pugpig-dev.com
attstatus.snowflake.com
express.pugpig.com
www3.pugpig.com
www2.pugpig.com
dns-vetting1i.map.fastly.net
*.firmworks.pro.pugpig.com
attstatus.snowflake.com
pugpig.com
attstatus.snowflake.com
www2.pugpig.com
www2.pugpig.com
dns-vetting1i.map.fastly.net
www.pugpig.com
dns-vetting1i.map.fastly.net
attstatus.snowflake.com
www3.pugpig.com

Certificate

The complete raw certificate details for www.pugpig.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2CkyF8ehOPkQESW33tZV
z3u/IZcddt6dh+j4ChqWd5bHbGbHw7+d0uACWWJOxa1eCLxcBL7vg1p46XR7a/mz
+HGRvlVZNwWUi7RpvHs2+Y4p7A0HC4zr7UE9e+WhUjKTHLZml1brJpoyfyNhbWDA
A7agw6Nz5APPxHlisrql1hllXtSjYGFfGB9ASmmUFa4ktcceB/Xlh7+QfthLDQIx
g8FH0tUDrJkVcTu1ah0/Qs5wr+or8ZIKhjOH3Or4E1gSV9J/mBotZaYhpj2eAzGl
K7zZjTpHsWjg8JK2RHqhIduPgPaQjpjfTjVI84SyOSl++HvlHyhvtymaqFGcj9ge
EwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 37976453967255323379846423950
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign CloudSSL CA - SHA256 - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-09 20:07:48 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-08 18:34:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'London'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'London'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Kaldor Ltd'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.pugpig.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27287788217310238902466149455271632952043732048129133626875884721037670860103571598610904468158246323872526061038681318545491525056871706308983687413341398164844108419064750789802657052087226935448343107105041410260107142736434211042292868652800970465364574239304919245157599433024383488996395593403029396613837338666359960640108815287652369925122029659609809778891335808005492768469383792016319151974850792251182524496584277574616965337842227583174443838711380542211819657130637971872366040948961273053688970044764258810387747540050032253318295833887691651699071702018593035104701283459502757191628246381082673946131
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/cloudsslsha2g3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/cloudsslsha2g3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2652 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pugpig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.content.pugpig-dev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.content.pugpig-stage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.content.pugpig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pugpig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abafrica.accaglobal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.bridesmagazine.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.chemistryworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.cntraveller.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.esg-magazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.estatesgazette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.futurefarming.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.glamourmagazine.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.gqstyle.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.healthinvestor.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.historytoday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.houseandgarden.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.legalweek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.lqgroup.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.spectator.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.tatler.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.tfreview.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.thepsychologist.bps.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.towpathtalk.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.vogue.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.wired.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.worldofinteriors.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appuk.futurefarming.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dareapp.superdrug.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'desktop.motorsportmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edition.independent.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edition.thestage.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'editorial.inese.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'energyrisk.app.incisivemedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'finreader.flightglobal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fxweek.app.incisivemedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guides.which.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homelife.lqgroup.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hsj.cdn.wilmingtonplc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imd.app.incisivemedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insuranceage.app.incisivemedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insurancehoundbroking.app.incisivemedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insurancehoundclaims.app.incisivemedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insurancehoundtechnology.app.incisivemedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'international-reader.firstnews.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jamiemagazine.hdigital.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'journal.isca.org.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mag.asiana.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.co-operativefood.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.cyclist.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.evo.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.mensfitness.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.physicstoday.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.slimmingworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.tennishead.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.theamorist.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.theglobalrecruiter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.theweek.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.which.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazines.rsc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.which.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsstandapp.investorschronicle.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'operationalrisk.app.incisivemedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'post.app.incisivemedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'puzzlerextra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'read.allaboutsoap.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'read.astronomynow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'read.bestmagazine.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'read.cosmopolitan.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'read.countryliving.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'read.elledecoration.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'read.elleuk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'read.esquire.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'read.goodhousekeeping.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'read.harpersbazaar.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'read.housebeautiful.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'read.insidesoap.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'read.menshealth.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'read.notionmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'read.prima.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'read.primal9.menshealth.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'read.realpeoplemag.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'read.redonline.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'read.reveal.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'read.runnersworld.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'read.townandcountrymag.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'read.womenshealthmag.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reader.affarsvarlden.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reader.boatinternational.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reader.filmcomment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reader.flightglobal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reader.fwi.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reader.motohead.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reader.nyteknik.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reader.poetrymagazine.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reader.sourcetoday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retail-week.cdn.ascential.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'risk.app.incisivemedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'riskeditions.app.incisivemedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'riskjournals.app.incisivemedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shareholder.share.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waters.app.incisivemedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weekly.morebikes.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pugpig.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e8eac11a7c39d38d5fadef41cedf4557a02e2b6f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a92b87e1ce24473b1bbfcf853702559d0d9458e6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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