cdncert.askmediagroup.com

- IAC Publishing, LLC -

Issued by GlobalSign CloudSSL CA - SHA256 - G3

About this certificate

This digital certificate with serial number 22:9c:55:ca:e1:85:2b:63:f9:13:e3:f5 was issued on by GlobalSign nv-sa.

With 110 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

IAC Publishing, LLC

Organization: IAC Publishing, LLC
State / Province: California
Locality: Oakland
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 22:9c:55:ca:e1:85:2b:63:f9:13:e3:f5
Serial Number (int): 10711487905429403835886199797
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: 1b:f2:7b:9b:c2:47:be:c8:9e:89:51:af:a4:5e:b2:a3:b5:8b:ce:e4
AuthorityKeyId: a9:2b:87:e1:ce:24:47:3b:1b:bf:cf:85:37:02:55:9d:0d:94:58:e6

Fingerprint (sha1): bf:a3:55:d8:84:3c:1d:d1:69:85:a3:e3:ce:1f:64:25:e9:65:cd:ec
Fingerprint (sha256): 0b:a7:41:08:1a:b1:4e:06:b8:45:0c:f5:22:14:11:6c:90:8a:2b:78:cf:09:f8:d6:a7:af:e9:0b:eb:a1:73:4a

Issuing Certificate URL: http://secure.globalsign.com/cacert/cloudsslsha2g3.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/cloudsslsha2g3

Check the revocation status for certificate cdncert.askmediagroup.com

110

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cdncert.askmediagroup.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cdncert.askmediagroup.com
*.about.ask.com
*.allresultsweb.com
*.allresultsweb.de
*.allresultsweb.fr
*.ask.ca
*.ask.co.uk
*.ask.com
*.ask.com.ru
*.ask.es
*.ask.it
*.ask.jp
*.askmediagroup.com
*.autospath.com
*.bloglines.com
*.candofinance.com
*.choosykitchen.com
*.consumersearch.com
*.consumersearch.de
*.directhit.com
*.everymanbusiness.com
*.everymantravel.com
*.faqtoids.com
*.findthedish.com
*.finecomb.com
*.govtsearches.com
*.homeandgardenideas.com
*.idealhomegarden.com
*.informationvine.com
*.informationvine.it
*.internetcorkboard.com
*.kensaq.com
*.life123.com
*.mydeal.io
*.ohdeal.com
*.pageset.com
*.productopia.com
*.pronto.com
*.reference.com
*.shop411.com
*.shopping.net
*.simpli.com
*.smarter.com
*.smarter.jp
*.smarter.ru
*.symptomfind.com
*.teoma.co.it
*.teoma.co.uk
*.teoma.es
*.teoma.eu
*.teoma.fr
*.teoma.jp
*.teoma.us
*.top10answers.com
allresultsweb.com
allresultsweb.de
allresultsweb.fr
ask.ca
ask.co.uk
ask.com
ask.com.ru
ask.es
ask.it
ask.jp
askmediagroup.com
autospath.com
bloglines.com
candofinance.com
choosykitchen.com
consumersearch.com
consumersearch.de
directhit.com
everymanbusiness.com
everymantravel.com
faqtoids.com
findthedish.com
finecomb.com
govtsearches.com
homeandgardenideas.com
idealhomegarden.com
index.about.com
informationvine.com
informationvine.it
internetcorkboard.com
kensaq.com
life123.com
local.citysearch.com
m.about.com
mydeal.io
ohdeal.com
pageset.com
productopia.com
pronto.com
reference.com
search.sidewalk.com
shop411.com
shopping.net
simpli.com
smarter.com
smarter.jp
smarter.ru
symptomfind.com
teoma.co.it
teoma.co.uk
teoma.es
teoma.eu
teoma.fr
teoma.jp
teoma.us
top10answers.com

Other certificates including the domain name askmediagroup.com

(limited to 100 certificates)
dns-vetting1-mims-pawel.map.fastly.net
dns-vetting1-mims-pawel.map.fastly.net
cdncert.askmediagroup.com
cdncert.askmediagroup.com
index.investopedia.com
dns-vetting1-mims-pawel.map.fastly.net
wildcardsan.askmediagroup.com
wildcardsan.askmediagroup.com
cdncert.askmediagroup.com
cdncert.askmediagroup.com
origin-wildsancert.askmediagroup.com
origin-wildsancert.askmediagroup.com
cdncert.askmediagroup.com
wildcardsan.askmediagroup.com
cdncert.askmediagroup.com
dns-vetting1-mims-pawel.map.fastly.net
wildcardsan.askmediagroup.com
wildcardsan.askmediagroup.com
index.investopedia.com
dns-vetting1-mims-pawel.map.fastly.net
wildcardsan.askmediagroup.com
dns-vetting1-mims-pawel.map.fastly.net
help.askmediagroup.com
dns-vetting1-mims-pawel.map.fastly.net
cdncert.askmediagroup.com
cdncert.askmediagroup.com
dns-vetting1-mims-pawel.map.fastly.net
cdncert.askmediagroup.com
cdncert.askmediagroup.com
wildcardsan.askmediagroup.com
dns-vetting1-mims-pawel.map.fastly.net
help.askmediagroup.com
dns-vetting1-mims-pawel.map.fastly.net
help.askmediagroup.com
cdncert.askmediagroup.com
cdncert.askmediagroup.com
*.about.ask.com
*.about.ask.com
help.askmediagroup.com
cdncert.askmediagroup.com
index.investopedia.com
dns-vetting1-mims-pawel.map.fastly.net
cdncert.askmediagroup.com
askmediagroup.com
cdncert.askmediagroup.com
dns-vetting1-mims-pawel.map.fastly.net
dns-vetting1-mims-pawel.map.fastly.net
www.ask.com
wildcardsan.askmediagroup.com
cdncert.askmediagroup.com
cdncert.askmediagroup.com
cdncert.askmediagroup.com
index.investopedia.com
cdncert.askmediagroup.com
origin-wildsancert.askmediagroup.com
wildcardsan.askmediagroup.com
cdncert.askmediagroup.com
wildcardsan.askmediagroup.com
dns-vetting1-mims-pawel.map.fastly.net
cdncert.askmediagroup.com
wildcardsan.askmediagroup.com
cdncert.askmediagroup.com
askmediagroup.com
cdncert.askmediagroup.com
cdncert.askmediagroup.com
dns-vetting1-mims-pawel.map.fastly.net
wildcardsan.askmediagroup.com
origin-wildsancert.askmediagroup.com
dns-vetting1-mims-pawel.map.fastly.net
cdncert.askmediagroup.com
cdncert.askmediagroup.com
help.askmediagroup.com
wildcardsan.askmediagroup.com
dns-vetting1-mims-pawel.map.fastly.net
origin-wildsancert.askmediagroup.com
www.ask.com
wildcardsan.askmediagroup.com
cdncert.askmediagroup.com
help.askmediagroup.com
cdncert.askmediagroup.com
dns-vetting1-mims-pawel.map.fastly.net
help.askmediagroup.com
dns-vetting1-mims-pawel.map.fastly.net
help.askmediagroup.com
cdncert.askmediagroup.com
www.ask.com
help.askmediagroup.com
index.investopedia.com
dns-vetting1-mims-pawel.map.fastly.net
askmediagroup.com
cdncert.askmediagroup.com
cdncert.askmediagroup.com
help.askmediagroup.com
cdncert.askmediagroup.com
cdncert.askmediagroup.com
wildcardsan.askmediagroup.com
cdncert.askmediagroup.com
cdncert.askmediagroup.com
askmediagroup.com
cdncert.askmediagroup.com

Certificate

The complete raw certificate details for cdncert.askmediagroup.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzxSf39DF3i636TDWVnJx
UMu0GdS2OcuofGp7ekDZ+0iwoVIzS3SdoZoHlRr9lwgRa3iYD+hL3yh0ZrOjAb8Z
ct8vtinO6JmmqFqEzSHC1xKP+p/j/x3VpKe6TifpXwhaSHTSe3cCVA9B28vtFIlC
3fYlgZHAnceGPuMd1TfHMGVpjLzYoXV+qpW3uK71O7VOqSRsTqDF7ivJJtG/Hqx0
ivB4HwS7iKSYvozYvay6dhiOfRX6qZI7juZanCpvJi4AhwCGtIysFda18xSw7VTi
6OUQJ8CAN5yo32Wndiug0ACwdHuvQRn9gFttQB+5Iu+C701FywdUIOqs1JI15ih6
PQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10711487905429403835886199797
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign CloudSSL CA - SHA256 - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-18 20:05:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-12 00:24:44 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Oakland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IAC Publishing, LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cdncert.askmediagroup.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26141499452367778118055060982623595000678525195338907070797074441184820200653685177244886315746322952121354880515175595391516943601113244649571277037149054404204975117077519152355228907471977843661733495094659411757307645515634391213130022679346797862976334241058224849478738926582585751244952509398008679892428421921480421086870869714883028723528982300820171372134616037703886562175019595585372349510954693971426534944981989410956688211771718945561003632675609819513638635817124325405633174349759740366442892955667632871771181209449324212907981272904640770052148422406725402653084881949373268766103846808471997020733
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/cloudsslsha2g3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/cloudsslsha2g3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1755 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdncert.askmediagroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.about.ask.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.allresultsweb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.allresultsweb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.allresultsweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ask.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ask.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ask.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ask.com.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ask.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ask.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ask.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.askmediagroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.autospath.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bloglines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.candofinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.choosykitchen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.consumersearch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.consumersearch.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.directhit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.everymanbusiness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.everymantravel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.faqtoids.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.findthedish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.finecomb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.govtsearches.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.homeandgardenideas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.idealhomegarden.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.informationvine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.informationvine.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.internetcorkboard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kensaq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.life123.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mydeal.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ohdeal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pageset.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.productopia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pronto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.reference.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shop411.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shopping.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.simpli.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.smarter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.smarter.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.smarter.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.symptomfind.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.teoma.co.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.teoma.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.teoma.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.teoma.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.teoma.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.teoma.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.teoma.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.top10answers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allresultsweb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allresultsweb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allresultsweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ask.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ask.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ask.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ask.com.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ask.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ask.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ask.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'askmediagroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autospath.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bloglines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'candofinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'choosykitchen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consumersearch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consumersearch.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'directhit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'everymanbusiness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'everymantravel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faqtoids.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'findthedish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'finecomb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'govtsearches.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homeandgardenideas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idealhomegarden.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'index.about.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'informationvine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'informationvine.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'internetcorkboard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kensaq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'life123.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.citysearch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.about.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mydeal.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ohdeal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pageset.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'productopia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pronto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reference.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'search.sidewalk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop411.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopping.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simpli.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smarter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smarter.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smarter.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'symptomfind.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teoma.co.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teoma.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teoma.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teoma.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teoma.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teoma.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teoma.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'top10answers.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a92b87e1ce24473b1bbfcf853702559d0d9458e6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1bf27b9bc247bec89e8951afa45eb2a3b58bcee4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb0000016d45fa8907000004030046304402200dec5861e835c723064eb033a19eacaec0e3ce05a8198a67edac25097f2b2810022039d18bd59aced216f5c1059b9108a88a645db8f0c8e355543d7cd4ec04e5ebfe0076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016d45fa88b200000403004730450220537456be914169522bfff1245127ad302dff1adeec31b2d0bdab279a2d2dee5a022100f4d9bbce966ec201693bca216fe403c459cbeb6570ab901ad6e54caeca407d52
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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