*.maven.io

Issued by GlobalSign Atlas R3 DV TLS CA H2 2021

About this certificate

This digital certificate with serial number 01:d4:bd:cc:82:51:77:ae:cf:8d:90:2c:d6:89:7b:26 was issued on by GlobalSign nv-sa.

With 129 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.maven.io

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 01:d4:bd:cc:82:51:77:ae:cf:8d:90:2c:d6:89:7b:26
Serial Number (int): 2433844508086081860251610065968659238
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 32:5b:fd:49:68:42:e0:09:73:f5:eb:56:40:d5:0f:3b:33:7e:c0:a4
AuthorityKeyId: 2a:34:b9:aa:fa:bf:3c:88:f1:47:f2:d2:12:78:be:c5:e5:aa:b0:69

Fingerprint (sha1): 25:4b:37:fa:04:4b:2e:b5:c4:61:81:78:6b:78:11:14:ef:22:34:0b
Fingerprint (sha256): 0f:c3:60:31:3f:fa:01:8f:c5:02:92:5e:68:58:aa:98:b4:6a:c6:ea:80:5f:c1:4e:8a:05:08:46:1d:cc:26:85

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlscah22021.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlscah22021
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlscah22021.crl

Check the revocation status for certificate *.maven.io

129

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.maven.io

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.maven.io
*.si.com
*.sikids.com
*.themaven.net
allhuskers.com
antiquetrader.com
automaven.io
awomanshealth.com
baseballmaven.io
basketballmaven.io
bassmagazine.com
bellatory.com
bio.com
bitcoinmagazine.com
boatersnewswire.com
breakawayropingjournal.com
bringmethenews.com
caloriebee.com
cannabismaven.io
collegesportsmaven.io
dealbreaker.com
defensemaven.io
djbooth.net
earthmaven.io
edm.com
enfuegonow.com
fadeawayworld.com
fadeawayworld.net
familymaven.io
foodmaven.io
footballmaven.io
gamesmaven.io
healthmaven.io
history-origin.prod.saymedia.com
historymaven.io
howtheyplay.com
indiancountrytoday.com
jamiegeller.com
kristyabero.com
letterpile.com
lifestylemaven.io
marinascats.com
maven.io
mavencorp.io
mavendoctors.io
mavenroundtable.io
mavensports.io
militarytrader.com
mishtalk.com
moneymaven.io
mtonews.com
musicmaven.io
newsmaven.io
numismaticnews.net
petmaven.io
remedygrove.com
sci-techmaven.io
scriptmag.com
si.com
soapboxie.com
sportsillustrated-origin.prod.saymedia.com
stablemanagement.com
stylemaven.io
taskandpurpose.com
tatring.com
thearthritisconnection.com
theindependent.io
theshoegame.com
theskincareedit.com
thespinecommunity.com
thestreet.thestreet.com
todaysmama.com
uat.thestreet.com
uptownmagazine.com
wokeamerica.com
writingmaven.io
www.antiquetrader.com
www.awomanshealth.com
www.bitcoinmagazine.com
www.djbooth.net
www.enfuegonow.com
www.hortmag.com
www.howcast.com
www.indiancountrytoday.com
www.inkedmag.com
www.jewlish.com
www.mediatakeout.com
www.militarytrader.com
www.momtrends.com
www.mtonews.com
www.numismaticnews.net
www.oldcarsweekly.com
www.opposingviews.com
www.organicauthority.com
www.scriptmag.com
www.secondspleasesarah.com
www.si.com
www.thearthritisconnection.com
www.thecurlingnews.com
www.themaven.net
www.theskincareedit.com
www.thespinecommunity.com
www.thestreet.com
www.uptownmagazine.com
www.wrestlingnewsworld.com
www.writersdigest.com
youmemindbody.com
thestreet.com
athlonsports.com
wildcatsdaily.com
www.athlonsports.com
allbruins.com
link.si.com
link.thestreet.com
giantscountry.com
allbengals.com
sikids.com
allsooners.com
cavsnow.com
cavaliersnow.com
*.fastly.maven.io
alllakers.com
www.alllakers.com
boilermakersnow.com
insidetheknights.com
roundtable.io
roundtablecrypto.io
globalcovidsummit.org
www.globalcovidsummit.org

Other certificates including the domain name maven.io

(limited to 100 certificates)
maven.io
cmp.channelpartner.de
dns-vetting1m.map.fastly.net
*.maven.io
automaven.io
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-49.gcs-web.com
saymedia2.map.fastly.net
consent.planetradio.co.uk
dns-vetting1m.map.fastly.net
*.maven.io
saymedia2.map.fastly.net
dns-vetting1m.map.fastly.net
dns-vetting1m.map.fastly.net
dns-vetting1m.map.fastly.net
themaven.net
saymedia2.map.fastly.net
saymedia2.map.fastly.net
*.maven.io
saymedia2.map.fastly.net
dns-vetting1m.map.fastly.net
dns-vetting1m.map.fastly.net
saymedia2.map.fastly.net
cmp.computerworld.com
stable.maven.io
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-49.gcs-web.com
saymedia2.map.fastly.net
dns-vetting1m.map.fastly.net
mms.sp-prod.net
cmp.channelpartner.de
leapfrog-ssl-49.gcs-web.com
saymedia2.map.fastly.net
saymedia2.map.fastly.net
leapfrog-ssl-49.gcs-web.com
saymedia2.map.fastly.net
saymedia2.map.fastly.net
dns-vetting1m.map.fastly.net
leapfrog-ssl-49.gcs-web.com
saymedia2.map.fastly.net
leapfrog-ssl-49.gcs-web.com
*.maven.io
*.maven.io
leapfrog-ssl-49.gcs-web.com
dns-vetting1m.map.fastly.net
saymedia2.map.fastly.net
*.maven.io
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-49.gcs-web.com
saymedia2.map.fastly.net
saymedia2.map.fastly.net
automaven.io
automaven.io
saymedia2.map.fastly.net
leapfrog-ssl-49.gcs-web.com
*.maven.io
saymedia2.map.fastly.net
*.maven.io
saymedia2.map.fastly.net
saymedia2.map.fastly.net
saymedia2.map.fastly.net
leapfrog-ssl-49.gcs-web.com
cmp.computerworld.com
saymedia2.map.fastly.net
saymedia2.map.fastly.net
saymedia2.map.fastly.net
leapfrog-ssl-49.gcs-web.com
saymedia2.map.fastly.net
dns-vetting1m.map.fastly.net
dns-vetting1m.map.fastly.net
leapfrog-ssl-49.gcs-web.com
saymedia2.map.fastly.net
saymedia2.map.fastly.net
cmp.computerworld.com
saymedia2.map.fastly.net
leapfrog-ssl-49.gcs-web.com
saymedia2.map.fastly.net
leapfrog-ssl-49.gcs-web.com
*.maven.io
saymedia2.map.fastly.net
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-49.gcs-web.com
saymedia2.map.fastly.net
dns-vetting1m.map.fastly.net
leapfrog-ssl-49.gcs-web.com
cmp.academics.at
dns-vetting1m.map.fastly.net
*.mavencoalition.io
cmp.computerworld.com
cmp.academics.at
*.maven.io
*.maven.io
cmp.academics.at
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-49.gcs-web.com
saymedia2.map.fastly.net
*.maven.io
dns-vetting1m.map.fastly.net
saymedia2.map.fastly.net

Certificate

The complete raw certificate details for *.maven.io in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8bIU744FTvgTKJEMssw
z4Vn/lrb+VlbeoG95acHyMBc9XrPQSYe23AKzX+ZUgnKjTy4jLOQy1ffsdNdoMAG
NUtt8nOZam79W5pFpreSnRqCamGKAdPToOadhPfXTwXO+CuOulQIeR5xPTDapf4Q
dzSNB+V6zwRkkJgubKDpxCg7s+qVKZpxsOYfaKfjYHx/wtwSp6qGNrcloQp8mPNq
zOod2RTgKJn3C4/y0McSChRp+zeQrr9/ZS45dEE6S66RsuEh+CMmIjGU1kQcJZmW
OPVRq8hvo/+ZkFbAsKyDfAGj3Di/R92332F17NBit53NiM9czCItZAKVEWY9u+a0
QQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2433844508086081860251610065968659238
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA H2 2021'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-09-21 21:30:47 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-23 21:30:46 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.maven.io'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21179820247177653505895393570673291055528725754121236697696824573667790305813175164983253144149911693551241002572079688335311452477602743865005658422276142031370179813318959212638709034756133571270890547540704255152925014367035864930245324972003287469734690747720666881040025014156915157981968044205869676048818449909722176825701029344305239723789512541583161252579996896240344170972349395895504921592960662209353504371192270706752721003406255423406750842536723643852313677133607992336694861544218748964241065109862724384966445139612651132453364672088583367813392151109943818198924783584137988158686646526350226535489
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2422 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.maven.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.si.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sikids.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.themaven.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allhuskers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'antiquetrader.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'automaven.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'awomanshealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baseballmaven.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'basketballmaven.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bassmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bellatory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bitcoinmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boatersnewswire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'breakawayropingjournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bringmethenews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caloriebee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cannabismaven.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collegesportsmaven.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dealbreaker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'defensemaven.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'djbooth.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'earthmaven.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enfuegonow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fadeawayworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fadeawayworld.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'familymaven.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foodmaven.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'footballmaven.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gamesmaven.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthmaven.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'history-origin.prod.saymedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'historymaven.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'howtheyplay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indiancountrytoday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jamiegeller.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kristyabero.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'letterpile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lifestylemaven.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marinascats.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maven.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mavencorp.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mavendoctors.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mavenroundtable.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mavensports.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'militarytrader.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mishtalk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moneymaven.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtonews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'musicmaven.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsmaven.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'numismaticnews.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'petmaven.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'remedygrove.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sci-techmaven.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scriptmag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'si.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soapboxie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportsillustrated-origin.prod.saymedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stablemanagement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stylemaven.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taskandpurpose.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tatring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thearthritisconnection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theindependent.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theshoegame.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theskincareedit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thespinecommunity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thestreet.thestreet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'todaysmama.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.thestreet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uptownmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wokeamerica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'writingmaven.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.antiquetrader.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.awomanshealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bitcoinmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.djbooth.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.enfuegonow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hortmag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.howcast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.indiancountrytoday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.inkedmag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jewlish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mediatakeout.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.militarytrader.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.momtrends.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtonews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.numismaticnews.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oldcarsweekly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opposingviews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.organicauthority.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.scriptmag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.secondspleasesarah.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.si.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thearthritisconnection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thecurlingnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.themaven.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theskincareedit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thespinecommunity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thestreet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uptownmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wrestlingnewsworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.writersdigest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'youmemindbody.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thestreet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'athlonsports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wildcatsdaily.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.athlonsports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allbruins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.si.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.thestreet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giantscountry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allbengals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sikids.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allsooners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cavsnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cavaliersnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fastly.maven.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alllakers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alllakers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boilermakersnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insidetheknights.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roundtable.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roundtablecrypto.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globalcovidsummit.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.globalcovidsummit.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							325bfd496842e00973f5eb5640d50f3b337ec0a4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlscah22021'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlscah22021.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 2a34b9aafabf3c88f147f2d21278bec5e5aab069
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlscah22021.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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