subscribe.hearstmags.com
- Hearst Communications, Inc. -
Issued by DigiCert TLS RSA SHA256 2020 CA1
About this certificate
This digital certificate with serial number 0d:1c:2b:e8:4c:1b:03:33:ca:d7:d8:2a:a4:af:6e:d0 was issued on by DigiCert Inc.
With 29 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Hearst Communications, Inc.
Organization:
Hearst Communications, Inc.
State / Province:
New York
Locality: New York
Country: US
Locality: New York
Country: US
DigiCert Inc
Organization:
DigiCert Inc
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 0d:1c:2b:e8:4c:1b:03:33:ca:d7:d8:2a:a4:af:6e:d0Serial Number (int): 17426238805343058718554502487105040080
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 59:b9:cf:f6:0b:77:7a:22:e4:3b:43:1d:4a:eb:f8:78:e3:41:1c:91
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4
Fingerprint (sha1): f4:41:63:eb:a0:fe:5d:06:c5:09:94:df:73:b6:d5:9d:da:07:82:c2
Fingerprint (sha256): 0f:41:5d:b2:82:22:12:d0:e1:a2:71:84:a5:3e:8e:c7:b2:8d:7c:3e:a1:4c:76:79:16:f1:7a:f0:82:e3:7a:0e
Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
Check the revocation status for certificate subscribe.hearstmags.com
29
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for subscribe.hearstmags.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
subscribe.hearstmags.com
subscribeandsave.womenshealthmag.com
subscribeandsave.womansday.com
subscribeandsave.veranda.com
subscribeandsave.townandcountrymag.com
subscribeandsave.thepioneerwomanmagazine.com
subscribeandsave.theoprahmag.com
subscribeandsave.seventeen.com
subscribeandsave.runnersworld.com
subscribeandsave.roadandtrack.com
subscribeandsave.redbookmag.com
subscribeandsave.prevention.com
subscribeandsave.popularmechanics.com
subscribeandsave.ocircleoffriends.com
subscribeandsave.menshealth.com
subscribeandsave.housebeautiful.com
subscribeandsave.hgtvmag.com
subscribeandsave.harpersbazaar.com
subscribeandsave.goodhousekeeping.com
subscribeandsave.foodnetworkmag.com
subscribeandsave.esquire.com
subscribeandsave.elledecor.com
subscribeandsave.elle.com
subscribeandsave.drozthegoodlife.com
subscribeandsave.countryliving.com
subscribeandsave.cosmopolitan.com
subscribeandsave.caranddriver.com
subscribeandsave.bicycling.com
order.hearstproducts.com
subscribeandsave.womenshealthmag.com
subscribeandsave.womansday.com
subscribeandsave.veranda.com
subscribeandsave.townandcountrymag.com
subscribeandsave.thepioneerwomanmagazine.com
subscribeandsave.theoprahmag.com
subscribeandsave.seventeen.com
subscribeandsave.runnersworld.com
subscribeandsave.roadandtrack.com
subscribeandsave.redbookmag.com
subscribeandsave.prevention.com
subscribeandsave.popularmechanics.com
subscribeandsave.ocircleoffriends.com
subscribeandsave.menshealth.com
subscribeandsave.housebeautiful.com
subscribeandsave.hgtvmag.com
subscribeandsave.harpersbazaar.com
subscribeandsave.goodhousekeeping.com
subscribeandsave.foodnetworkmag.com
subscribeandsave.esquire.com
subscribeandsave.elledecor.com
subscribeandsave.elle.com
subscribeandsave.drozthegoodlife.com
subscribeandsave.countryliving.com
subscribeandsave.cosmopolitan.com
subscribeandsave.caranddriver.com
subscribeandsave.bicycling.com
order.hearstproducts.com
Other certificates including the domain name hearstmags.com
(limited to 100 certificates)
wpm.ccmp.eu
*.25ans.jp
subscribe.hearstmags.com
wpm03.eccmp.com
cosmopolitan.com
services.hearstmags.com
preferences.hearstmags.com
wpm.ccmp.eu
preferences.hearstmags.com
cosmopolitan.com
wpm03.eccmp.com
subscribe.hearstmags.com
wpm.ccmp.eu
admin.hearstmags.com
wpm.ccmp.eu
subscribe.hearstmags.com
services.hearstmags.com
hearst-hdm.map.fastly.net
hearst-hdm.map.fastly.net
wpm03.eccmp.com
hearst-hdm.map.fastly.net
wpm.ccmp.eu
hearst-hdm.map.fastly.net
wpm.ccmp.eu
wpm03.eccmp.com
cosmopolitan.com
subscribe.hearstmags.com
subscribe.hearstmags.com
subscribe.hearstmags.com
stage.services.hearstmags.com
cosmopolitan.com
wpm.ccmp.eu
services.hearstmags.com
wpm03.eccmp.com
stage.services.hearstmags.com
wpm.ccmp.eu
subscribe.hearstmags.com
admin.hearstmags.com
subscribe.hearstmags.com
cosmopolitan.com
wpm.ccmp.eu
admin.hearstmags.com
wpm03.eccmp.com
hearst-hdm.map.fastly.net
subscribe.hearstmags.com
cosmopolitan.com
wpm.ccmp.eu
wpm.ccmp.eu
stage.services.hearstmags.com
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
hearst-hdm.map.fastly.net
hearst-hdm.map.fastly.net
wpm.ccmp.eu
wpm.ccmp.eu
hearst-hdm.map.fastly.net
subscribe.hearstmags.com
wpm.ccmp.eu
subscribe.hearstmags.com
wpm.ccmp.eu
services.hearstmags.com
subscribe.hearstmags.com
services.hearstmags.com
hearst-hdm.map.fastly.net
hearst-hdm.map.fastly.net
hearst-hdm.map.fastly.net
subscribe.hearstmags.com
subscribe.hearstmags.com
subscribe.hearstmags.com
cosmopolitan.com
subscribe.hearstmags.com
hearst-hdm.map.fastly.net
cosmopolitan.com
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
subscribe.hearstmags.com
cosmopolitan.com
hearst-hdm.map.fastly.net
cosmopolitan.com
wpm.ccmp.eu
optout.hearstmags.com
cosmopolitan.com
cosmopolitan.com
hearst-hdm.map.fastly.net
preferences.hearstmags.com
wpm.ccmp.eu
subscribe.hearstmags.com
admin.hearstmags.com
subscribe.hearstmags.com
subscribe.hearstmags.com
hearst-hdm.map.fastly.net
hearst-hdm.map.fastly.net
wpm.ccmp.eu
wpm.ccmp.eu
subscribe.hearstmags.com
hearst-hdm.map.fastly.net
cosmopolitan.com
subscribe.hearstmags.com
*.25ans.jp
subscribe.hearstmags.com
wpm03.eccmp.com
cosmopolitan.com
services.hearstmags.com
preferences.hearstmags.com
wpm.ccmp.eu
preferences.hearstmags.com
cosmopolitan.com
wpm03.eccmp.com
subscribe.hearstmags.com
wpm.ccmp.eu
admin.hearstmags.com
wpm.ccmp.eu
subscribe.hearstmags.com
services.hearstmags.com
hearst-hdm.map.fastly.net
hearst-hdm.map.fastly.net
wpm03.eccmp.com
hearst-hdm.map.fastly.net
wpm.ccmp.eu
hearst-hdm.map.fastly.net
wpm.ccmp.eu
wpm03.eccmp.com
cosmopolitan.com
subscribe.hearstmags.com
subscribe.hearstmags.com
subscribe.hearstmags.com
stage.services.hearstmags.com
cosmopolitan.com
wpm.ccmp.eu
services.hearstmags.com
wpm03.eccmp.com
stage.services.hearstmags.com
wpm.ccmp.eu
subscribe.hearstmags.com
admin.hearstmags.com
subscribe.hearstmags.com
cosmopolitan.com
wpm.ccmp.eu
admin.hearstmags.com
wpm03.eccmp.com
hearst-hdm.map.fastly.net
subscribe.hearstmags.com
cosmopolitan.com
wpm.ccmp.eu
wpm.ccmp.eu
stage.services.hearstmags.com
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
hearst-hdm.map.fastly.net
hearst-hdm.map.fastly.net
wpm.ccmp.eu
wpm.ccmp.eu
hearst-hdm.map.fastly.net
subscribe.hearstmags.com
wpm.ccmp.eu
subscribe.hearstmags.com
wpm.ccmp.eu
services.hearstmags.com
subscribe.hearstmags.com
services.hearstmags.com
hearst-hdm.map.fastly.net
hearst-hdm.map.fastly.net
hearst-hdm.map.fastly.net
subscribe.hearstmags.com
subscribe.hearstmags.com
subscribe.hearstmags.com
cosmopolitan.com
subscribe.hearstmags.com
hearst-hdm.map.fastly.net
cosmopolitan.com
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
subscribe.hearstmags.com
cosmopolitan.com
hearst-hdm.map.fastly.net
cosmopolitan.com
wpm.ccmp.eu
optout.hearstmags.com
cosmopolitan.com
cosmopolitan.com
hearst-hdm.map.fastly.net
preferences.hearstmags.com
wpm.ccmp.eu
subscribe.hearstmags.com
admin.hearstmags.com
subscribe.hearstmags.com
subscribe.hearstmags.com
hearst-hdm.map.fastly.net
hearst-hdm.map.fastly.net
wpm.ccmp.eu
wpm.ccmp.eu
subscribe.hearstmags.com
hearst-hdm.map.fastly.net
cosmopolitan.com
subscribe.hearstmags.com
Certificate
The complete raw certificate details for subscribe.hearstmags.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIKoTCCCYmgAwIBAgIQDRwr6EwbAzPK19gqpK9u0DANBgkqhkiG9w0BAQsFADBP MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMSkwJwYDVQQDEyBE aWdpQ2VydCBUTFMgUlNBIFNIQTI1NiAyMDIwIENBMTAeFw0yMzEwMDIwMDAwMDBa Fw0yNDEwMDEyMzU5NTlaMHwxCzAJBgNVBAYTAlVTMREwDwYDVQQIEwhOZXcgWW9y azERMA8GA1UEBxMITmV3IFlvcmsxJDAiBgNVBAoTG0hlYXJzdCBDb21tdW5pY2F0 aW9ucywgSW5jLjEhMB8GA1UEAxMYc3Vic2NyaWJlLmhlYXJzdG1hZ3MuY29tMIIB IjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAviUgeIoBQyboNgNLxBZY3R8A 5WZsD+9kEYmBvgi/1IW0dYD6Z8dFu+nMD0lsp1h/egmMeXNJd0NkAGYKEtIUQ5Id NiHPS2GBNb4mMArKKu9IH+LPAuC5DmPQu+C6ZpTXy32QMQHN9LopQVWjaG0lZ1l9 aMESuX3D8Rvi7p3cfGKZfykilLLkytMpBOJXdX6IQmyHJ0a1lgqRGvWOlHUh4PXd z+V5F0XuDVgT9tOVIoRVQ4T58tPICdu3HWbc0y0OTqvPhcxQaacsHHA0Kam5P5Rp QPVCjEeZajgAG0nowAI0O34W+iN9bZJYWIHR8qkEBik8NMjUKGQxA9LJVYGJoQID AQABo4IHSjCCB0YwHwYDVR0jBBgwFoAUt2ui6qiqhIx56rTaD5iyxZV2ufQwHQYD VR0OBBYEFFm5z/YLd3oi5DtDHUrr+HjjQRyRMIID8AYDVR0RBIID5zCCA+OCGHN1 YnNjcmliZS5oZWFyc3RtYWdzLmNvbYIkc3Vic2NyaWJlYW5kc2F2ZS53b21lbnNo ZWFsdGhtYWcuY29tgh5zdWJzY3JpYmVhbmRzYXZlLndvbWFuc2RheS5jb22CHHN1 YnNjcmliZWFuZHNhdmUudmVyYW5kYS5jb22CJnN1YnNjcmliZWFuZHNhdmUudG93 bmFuZGNvdW50cnltYWcuY29tgixzdWJzY3JpYmVhbmRzYXZlLnRoZXBpb25lZXJ3 b21hbm1hZ2F6aW5lLmNvbYIgc3Vic2NyaWJlYW5kc2F2ZS50aGVvcHJhaG1hZy5j b22CHnN1YnNjcmliZWFuZHNhdmUuc2V2ZW50ZWVuLmNvbYIhc3Vic2NyaWJlYW5k c2F2ZS5ydW5uZXJzd29ybGQuY29tgiFzdWJzY3JpYmVhbmRzYXZlLnJvYWRhbmR0 cmFjay5jb22CH3N1YnNjcmliZWFuZHNhdmUucmVkYm9va21hZy5jb22CH3N1YnNj cmliZWFuZHNhdmUucHJldmVudGlvbi5jb22CJXN1YnNjcmliZWFuZHNhdmUucG9w dWxhcm1lY2hhbmljcy5jb22CJXN1YnNjcmliZWFuZHNhdmUub2NpcmNsZW9mZnJp ZW5kcy5jb22CH3N1YnNjcmliZWFuZHNhdmUubWVuc2hlYWx0aC5jb22CI3N1YnNj cmliZWFuZHNhdmUuaG91c2ViZWF1dGlmdWwuY29tghxzdWJzY3JpYmVhbmRzYXZl LmhndHZtYWcuY29tgiJzdWJzY3JpYmVhbmRzYXZlLmhhcnBlcnNiYXphYXIuY29t giVzdWJzY3JpYmVhbmRzYXZlLmdvb2Rob3VzZWtlZXBpbmcuY29tgiNzdWJzY3Jp YmVhbmRzYXZlLmZvb2RuZXR3b3JrbWFnLmNvbYIcc3Vic2NyaWJlYW5kc2F2ZS5l c3F1aXJlLmNvbYIec3Vic2NyaWJlYW5kc2F2ZS5lbGxlZGVjb3IuY29tghlzdWJz Y3JpYmVhbmRzYXZlLmVsbGUuY29tgiRzdWJzY3JpYmVhbmRzYXZlLmRyb3p0aGVn b29kbGlmZS5jb22CInN1YnNjcmliZWFuZHNhdmUuY291bnRyeWxpdmluZy5jb22C IXN1YnNjcmliZWFuZHNhdmUuY29zbW9wb2xpdGFuLmNvbYIhc3Vic2NyaWJlYW5k c2F2ZS5jYXJhbmRkcml2ZXIuY29tgh5zdWJzY3JpYmVhbmRzYXZlLmJpY3ljbGlu Zy5jb22CGG9yZGVyLmhlYXJzdHByb2R1Y3RzLmNvbTA+BgNVHSAENzA1MDMGBmeB DAECAjApMCcGCCsGAQUFBwIBFhtodHRwOi8vd3d3LmRpZ2ljZXJ0LmNvbS9DUFMw DgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjCB jwYDVR0fBIGHMIGEMECgPqA8hjpodHRwOi8vY3JsMy5kaWdpY2VydC5jb20vRGln aUNlcnRUTFNSU0FTSEEyNTYyMDIwQ0ExLTQuY3JsMECgPqA8hjpodHRwOi8vY3Js NC5kaWdpY2VydC5jb20vRGlnaUNlcnRUTFNSU0FTSEEyNTYyMDIwQ0ExLTQuY3Js MH8GCCsGAQUFBwEBBHMwcTAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AuZGlnaWNl cnQuY29tMEkGCCsGAQUFBzAChj1odHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5jb20v RGlnaUNlcnRUTFNSU0FTSEEyNTYyMDIwQ0ExLTEuY3J0MAwGA1UdEwEB/wQCMAAw ggF+BgorBgEEAdZ5AgQCBIIBbgSCAWoBaAB1AO7N0GTV2xrOxVy3nbTNE6Iyh0Z8 vOzew1FIWUZxH7WbAAABivF0K2gAAAQDAEYwRAIgRgWhqxIbMtr5iAgV7Wv0AhDZ 5eAAdE7wQDY3BPauOSECIAzuoQArdgVytYtZUjeW2vSFa+StJezFrwWa9PMH6Tng AHYASLDja9qmRzQP5WoC+p0w6xxSActW3SyB2bu/qznYhHMAAAGK8XQrwgAABAMA RzBFAiEAykPtPCcXB+k56IEz+NtkH/XIuoiYdmsfBdICTRRFfvYCIFGA/ZkaN+Gn 5/u/EqqVFcR519PA8fANmi1NYptASdMNAHcA2ra/az+1tiKfm8K7XGvocJFxbLtR hIU0vaQ9MEjX+6sAAAGK8XQrgwAABAMASDBGAiEA9mQMubyn/TBts53CCus3r5Rk RZYbivdPWoHELACFTfMCIQCAitqRoCdBkW+R8iYkUp1HzNtcYqY6Z9RNt1CcKizn STANBgkqhkiG9w0BAQsFAAOCAQEAFnc80Ua8pf2p7WcNkZ3S5qWgHGyGQd9AqUCu XdxMuSeSCdXYYwUwt38cQ35nA6CPUUh1rA52Q2oWOwVb2o6AjbL36eiBuTElEYCH nmqiTDzbJS20uPngacnWxy1MsxRdU6SmEpSLl12EQVleInk6T+mL6p1n5WujNOFz /wdUw4VDUaxMh2fpsnYztZa0pd/01DRLq8eQxxumktIpLzAffqADVUOXaxw6bITj 0P3gxQlx6YT+peF0Ssnu+R6VFCRiVHVU9d3guaDkFbfXDRzK2/BO+iEYn4aSVIJA JCMcM/n7vIXujBD96GiMFq0eztyD8aJK4Ushn1JfKCtvcFduTQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAviUgeIoBQyboNgNLxBZY 3R8A5WZsD+9kEYmBvgi/1IW0dYD6Z8dFu+nMD0lsp1h/egmMeXNJd0NkAGYKEtIU Q5IdNiHPS2GBNb4mMArKKu9IH+LPAuC5DmPQu+C6ZpTXy32QMQHN9LopQVWjaG0l Z1l9aMESuX3D8Rvi7p3cfGKZfykilLLkytMpBOJXdX6IQmyHJ0a1lgqRGvWOlHUh 4PXdz+V5F0XuDVgT9tOVIoRVQ4T58tPICdu3HWbc0y0OTqvPhcxQaacsHHA0Kam5 P5RpQPVCjEeZajgAG0nowAI0O34W+iN9bZJYWIHR8qkEBik8NMjUKGQxA9LJVYGJ oQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 17426238805343058718554502487105040080 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-02 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-01 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hearst Communications, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'subscribe.hearstmags.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24003585870346090595712327879815350524195694977684589544785551284148428682736073748158393994424931250094446295543077331304680065461239476551695414085872852333203087511610101973141658118685155185975346620617340785452523740231600922103722604672708043323971293312022887423262872066824650937477052944536893110373133715463143218695258330100272284930350498673290187990524957947332905471899599561863127754529554988914164486387291576820716799712375845645806739352261969720186068372597951753120851541575403672489937741812524401723016663165518537779939612842556945481175131712367509059809399666931811342011505407269143232743841 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 59b9cff60b777a22e43b431d4aebf878e3411c91 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (999 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscribe.hearstmags.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscribeandsave.womenshealthmag.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscribeandsave.womansday.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscribeandsave.veranda.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscribeandsave.townandcountrymag.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscribeandsave.thepioneerwomanmagazine.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscribeandsave.theoprahmag.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscribeandsave.seventeen.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscribeandsave.runnersworld.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscribeandsave.roadandtrack.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscribeandsave.redbookmag.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscribeandsave.prevention.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscribeandsave.popularmechanics.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscribeandsave.ocircleoffriends.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscribeandsave.menshealth.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscribeandsave.housebeautiful.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscribeandsave.hgtvmag.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscribeandsave.harpersbazaar.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscribeandsave.goodhousekeeping.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscribeandsave.foodnetworkmag.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscribeandsave.esquire.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscribeandsave.elledecor.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscribeandsave.elle.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscribeandsave.drozthegoodlife.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscribeandsave.countryliving.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscribeandsave.cosmopolitan.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscribeandsave.caranddriver.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscribeandsave.bicycling.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'order.hearstproducts.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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