hearst-uk.map.fastly.net

- Fastly, Inc. -

Issued by GlobalSign CloudSSL CA - SHA256 - G3

About this certificate

This digital certificate with serial number 4b:26:8c:c1:e1:c7:08:9b:e7:5c:0f:1a was issued on by GlobalSign nv-sa.

With 39 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Fastly, Inc.

Organization: Fastly, Inc.
State / Province: California
Locality: San Francisco
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 4b:26:8c:c1:e1:c7:08:9b:e7:5c:0f:1a
Serial Number (int): 23257979625544425683864522522
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 4a:e9:24:15:e0:c9:65:08:68:c2:44:cf:b4:09:43:65:8e:bd:df:9b
AuthorityKeyId: a9:2b:87:e1:ce:24:47:3b:1b:bf:cf:85:37:02:55:9d:0d:94:58:e6

Fingerprint (sha1): c6:38:aa:2f:1e:16:c1:d6:78:72:f8:95:7c:1d:35:e6:07:0a:08:b1
Fingerprint (sha256): 0f:34:8b:40:e1:ad:bf:5a:2e:4d:33:04:54:ae:fc:ac:8d:49:cc:08:16:7b:00:38:9b:bd:c3:c5:ac:2d:db:c8

Issuing Certificate URL: http://secure.globalsign.com/cacert/cloudsslsha2g3.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/cloudsslsha2g3

Check the revocation status for certificate hearst-uk.map.fastly.net

39

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for hearst-uk.map.fastly.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

hearst-uk.map.fastly.net
*.asdagoodliving.co.uk
*.cdnds.net
*.countryliving.co.uk
*.digitalspy.co.uk
*.digitalspy.com
*.elledecoration.co.uk
*.elleuk.com
*.esquire.co.uk
*.goodhousekeeping.co.uk
*.harpersbazaar.co.uk
*.hearst.co.uk
*.housebeautiful.co.uk
*.insidesoap.co.uk
*.menshealth.co.uk
*.netdoctor.co.uk
*.redonline.co.uk
*.runnersworld.co.uk
*.townandcountrymag.co.uk
*.womenshealthmag.co.uk
asdagoodliving.co.uk
cdnds.net
countryliving.co.uk
digitalspy.co.uk
digitalspy.com
elledecoration.co.uk
elleuk.com
esquire.co.uk
goodhousekeeping.co.uk
harpersbazaar.co.uk
hearst.co.uk
housebeautiful.co.uk
insidesoap.co.uk
menshealth.co.uk
netdoctor.co.uk
redonline.co.uk
runnersworld.co.uk
townandcountrymag.co.uk
womenshealthmag.co.uk

Other certificates including the domain name hearst-uk.map.fastly.net

(limited to 100 certificates)
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net

Certificate

The complete raw certificate details for hearst-uk.map.fastly.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4cm3mLXHKpIr0tTwIMDt
S1HC3R1/eWhWJ/yUX5KW6IMl73vSITiX5anoEQELcUWYFuz092SLh+V1514fxgky
td+g9E4MDgOi2bA2y1o/wZXMWFT1pFUsjYOLjLoGVCGBu6oy37Pmj8/L8JMnO7NJ
eN7L1p1p2nx/prkh9YAce4f8iOReEO94MZ9l3hiCdc+RFdaZ+k8SpVN6s5VXJg2O
8YeGNmh6zuEBpRip6j6jYuWgWhe64d62XKz2Sc3h4Z99CBfJ93Lq+jHgpY2PIvtS
M1w/OYq1TBOZRrPgtvK9p3j34xgz6NwdJAhxb7KNrA1KId9SWlvZkTYRlKOhaTFl
VwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 23257979625544425683864522522
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign CloudSSL CA - SHA256 - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-12-13 10:45:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-16 18:10:53 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Fastly, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'hearst-uk.map.fastly.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28503089063137796078250014720537872882795249994561406599755842350671525042368508337556245769167374190512137393075989173245784303520217964299917053185589657855567784102292566677205879258619407166533071109008655789235829557754263090060293438488251230432159339944481387103617116277272170493226601723965698035766840303798761167785954021648734933710154127674882578540329928597828772380448624260572325001046359133320105633720009248843538091797823022886285012660510921149652141769278559413692078869954623343651888334669814167720177444493819723362265027937696066013544989019944704926673559791988962313076529881330964608673111
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/cloudsslsha2g3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/cloudsslsha2g3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (780 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hearst-uk.map.fastly.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.asdagoodliving.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cdnds.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.countryliving.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.digitalspy.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.digitalspy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elledecoration.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elleuk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.esquire.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.goodhousekeeping.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.harpersbazaar.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hearst.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.housebeautiful.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.insidesoap.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.menshealth.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.netdoctor.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.redonline.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.runnersworld.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.townandcountrymag.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.womenshealthmag.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asdagoodliving.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdnds.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'countryliving.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalspy.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalspy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elledecoration.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elleuk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esquire.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goodhousekeeping.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harpersbazaar.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hearst.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'housebeautiful.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insidesoap.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'menshealth.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netdoctor.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redonline.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'runnersworld.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'townandcountrymag.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'womenshealthmag.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4ae92415e0c9650868c244cfb40943658ebddf9b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a92b87e1ce24473b1bbfcf853702559d0d9458e6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (485 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (481 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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