shop.elle.com
Issued by R3
About this certificate
This digital certificate with serial number 04:c3:bc:7a:14:e7:df:3c:98:35:a8:89:0d:ed:d4:65:0d:54 was issued on by Let's Encrypt.
With 27 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=shop.elle.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:c3:bc:7a:14:e7:df:3c:98:35:a8:89:0d:ed:d4:65:0d:54Serial Number (int): 415054734024067278420287577283618087963988
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 70:91:1c:e1:25:f1:f1:e3:21:12:a1:c5:12:2b:04:01:c5:8a:47:77
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): c8:c7:8a:fb:13:dd:55:72:ff:d5:43:6e:a5:af:6f:ea:52:ee:3c:6c
Fingerprint (sha256): 0f:ce:d4:ac:e4:9a:3c:e7:67:3a:44:ca:38:76:61:b7:25:32:5b:b4:e6:a5:80:84:8c:35:c3:3b:95:ce:01:b0
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate shop.elle.com
27
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for shop.elle.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
shop.bestproducts.com
shop.bicycling.com
shop.cosmopolitan.com
shop.countryliving.com
shop.elle.com
shop.elledecor.com
shop.esquire.com
shop.goodhousekeeping.com
shop.marieclaire.com
shop.menshealth.com
shop.oprahdaily.com
shop.popularmechanics.com
shop.prevention.com
shop.roadandtrack.com
shop.seventeen.com
shop.thefoodnetworkmag.com
shop.thehgtvmag.com
shop.thepioneerwoman.com
shop.townandcountrymag.com
shop.veranda.com
shop.womansday.com
shop.womenshealthmag.com
store.caranddriver.com
store.delish.com
store.harpersbazaar.com
store.runnersworld.com
thehgtvmag.com
shop.bicycling.com
shop.cosmopolitan.com
shop.countryliving.com
shop.elle.com
shop.elledecor.com
shop.esquire.com
shop.goodhousekeeping.com
shop.marieclaire.com
shop.menshealth.com
shop.oprahdaily.com
shop.popularmechanics.com
shop.prevention.com
shop.roadandtrack.com
shop.seventeen.com
shop.thefoodnetworkmag.com
shop.thehgtvmag.com
shop.thepioneerwoman.com
shop.townandcountrymag.com
shop.veranda.com
shop.womansday.com
shop.womenshealthmag.com
store.caranddriver.com
store.delish.com
store.harpersbazaar.com
store.runnersworld.com
thehgtvmag.com
Other certificates including the domain name elle.com
(limited to 100 certificates)
*.25ans.jp
dns-vetting1-mims-pawel.map.fastly.net
test.beauty-awards.elle.com
hearst-prod.actioniq.mr-in.com
dns-vetting1-mims-pawel.map.fastly.net
hearst-prod.actioniq.mr-in.com
dns-vetting1-mims-pawel.map.fastly.net
hearst-prod.actioniq.mr-in.com
shop.elle.com
sli.esquire.com
dns-vetting1-mims-pawel.map.fastly.net
cosmopolitan.com
mcstaging-shop.elle.com
hearst-prod.actioniq.mr-in.com
mcstaging-shop.elle.com
beauty-awards.elle.com
shop.elle.com
*.hearstapps.com
dns-vetting1-mims-pawel.map.fastly.net
dns-vetting1-mims-pawel.map.fastly.net
secure.hdmtools.com
dns-vetting1-mims-pawel.map.fastly.net
shop.elle.com
cosmopolitan.com
shop.elle.com
dns-vetting1-mims-pawel.map.fastly.net
store.caranddriver.com
dns-vetting1-mims-pawel.map.fastly.net
subscribe.hearstmags.com
sli.esquire.com
sli.esquire.com
mcstaging-shop.elle.com
shop.elle.com
dns-vetting1-mims-pawel.map.fastly.net
link.elle.com
hearst-hdm.map.fastly.net
beauty-awards.elle.com
hearst-hdm.map.fastly.net
hearst-hdm.map.fastly.net
shop.cosmopolitan.com
shop.elle.com
dns-vetting1-mims-pawel.map.fastly.net
shop-tw.elle.com
service.elle.com
shop-tw.elle.com
hearst-hdm.map.fastly.net
sli.esquire.com
cosmopolitan.com
subscribe.hearstmags.com
dns-vetting1-mims-pawel.map.fastly.net
magentocloud55.map.fastly.net
subscribe.hearstmags.com
dns-vetting1-mims-pawel.map.fastly.net
subscribe.hearstmags.com
cosmopolitan.com
shop.elle.com
shop.elle.com
hearst-prod.actioniq.mr-in.com
shop.elledecor.com
mcstaging-shop.elle.com
test.beauty-awards.elle.com
mcstaging-shop.elle.com
dns-vetting1-mims-pawel.map.fastly.net
subscribe.hearstmags.com
sli.esquire.com
shop.elle.com
hearst-hdm.map.fastly.net
subscribe.hearstmags.com
dns-vetting1-mims-pawel.map.fastly.net
cosmopolitan.com
store.caranddriver.com
shop-tw.elle.com
dns-vetting1-mims-pawel.map.fastly.net
mcstaging-shop.elle.com
test.beauty-awards.elle.com
shop.elle.com
shop.elle.com
sli.esquire.com
dns-vetting1-mims-pawel.map.fastly.net
link.elle.com
test.beauty-awards.elle.com
hearst-hdm.map.fastly.net
subscribe.hearstmags.com
cosmopolitan.com
dns-vetting1-mims-pawel.map.fastly.net
mcstaging-shop.elle.com
mcstaging-shop.elle.com
dns-vetting1-mims-pawel.map.fastly.net
shop.elle.com
shop.elle.com
dns-vetting1-mims-pawel.map.fastly.net
join.womansday.com
hearst-hdm.map.fastly.net
sli.esquire.com
hearst-hdm.map.fastly.net
hearst-hdm.map.fastly.net
mcstaging-shop.elle.com
shop.elle.com
hearst-hdm.map.fastly.net
hearst-hdm.map.fastly.net
dns-vetting1-mims-pawel.map.fastly.net
test.beauty-awards.elle.com
hearst-prod.actioniq.mr-in.com
dns-vetting1-mims-pawel.map.fastly.net
hearst-prod.actioniq.mr-in.com
dns-vetting1-mims-pawel.map.fastly.net
hearst-prod.actioniq.mr-in.com
shop.elle.com
sli.esquire.com
dns-vetting1-mims-pawel.map.fastly.net
cosmopolitan.com
mcstaging-shop.elle.com
hearst-prod.actioniq.mr-in.com
mcstaging-shop.elle.com
beauty-awards.elle.com
shop.elle.com
*.hearstapps.com
dns-vetting1-mims-pawel.map.fastly.net
dns-vetting1-mims-pawel.map.fastly.net
secure.hdmtools.com
dns-vetting1-mims-pawel.map.fastly.net
shop.elle.com
cosmopolitan.com
shop.elle.com
dns-vetting1-mims-pawel.map.fastly.net
store.caranddriver.com
dns-vetting1-mims-pawel.map.fastly.net
subscribe.hearstmags.com
sli.esquire.com
sli.esquire.com
mcstaging-shop.elle.com
shop.elle.com
dns-vetting1-mims-pawel.map.fastly.net
link.elle.com
hearst-hdm.map.fastly.net
beauty-awards.elle.com
hearst-hdm.map.fastly.net
hearst-hdm.map.fastly.net
shop.cosmopolitan.com
shop.elle.com
dns-vetting1-mims-pawel.map.fastly.net
shop-tw.elle.com
service.elle.com
shop-tw.elle.com
hearst-hdm.map.fastly.net
sli.esquire.com
cosmopolitan.com
subscribe.hearstmags.com
dns-vetting1-mims-pawel.map.fastly.net
magentocloud55.map.fastly.net
subscribe.hearstmags.com
dns-vetting1-mims-pawel.map.fastly.net
subscribe.hearstmags.com
cosmopolitan.com
shop.elle.com
shop.elle.com
hearst-prod.actioniq.mr-in.com
shop.elledecor.com
mcstaging-shop.elle.com
test.beauty-awards.elle.com
mcstaging-shop.elle.com
dns-vetting1-mims-pawel.map.fastly.net
subscribe.hearstmags.com
sli.esquire.com
shop.elle.com
hearst-hdm.map.fastly.net
subscribe.hearstmags.com
dns-vetting1-mims-pawel.map.fastly.net
cosmopolitan.com
store.caranddriver.com
shop-tw.elle.com
dns-vetting1-mims-pawel.map.fastly.net
mcstaging-shop.elle.com
test.beauty-awards.elle.com
shop.elle.com
shop.elle.com
sli.esquire.com
dns-vetting1-mims-pawel.map.fastly.net
link.elle.com
test.beauty-awards.elle.com
hearst-hdm.map.fastly.net
subscribe.hearstmags.com
cosmopolitan.com
dns-vetting1-mims-pawel.map.fastly.net
mcstaging-shop.elle.com
mcstaging-shop.elle.com
dns-vetting1-mims-pawel.map.fastly.net
shop.elle.com
shop.elle.com
dns-vetting1-mims-pawel.map.fastly.net
join.womansday.com
hearst-hdm.map.fastly.net
sli.esquire.com
hearst-hdm.map.fastly.net
hearst-hdm.map.fastly.net
mcstaging-shop.elle.com
shop.elle.com
hearst-hdm.map.fastly.net
hearst-hdm.map.fastly.net
Certificate
The complete raw certificate details for shop.elle.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHbTCCBlWgAwIBAgISBMO8ehTn3zyYNaiJDe3UZQ1UMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMTA5MjkyMDEzNTZaFw0yMTEyMjgyMDEzNTVaMBgxFjAUBgNVBAMT DXNob3AuZWxsZS5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDW G4YtRPlzqm3VY7nfvgJSletaP74qSCrc6Iir0AB7oywMR1vTeySH6Wpjn6U2/W/+ E0WszVvRRKN8BPK47Ncpxa2LGPRaKl6+bT54th2drtpK497NBz7K57Y6BIrXQ7cY Tu/fwwncFsZve1Y1LzROFMQrCMW5xacxUct+tyNqhXiB9Ceyl+A/GE8qTNT4B8eq O8IQgkkdhP6StEBDIxSmlZK2A3Z+0SHpKZ7qdLpC9XoSS4pIYC6GKf/6kFuYK8YX b+oe3b0XZ5fmDbnT6CzuwXa16vpSVSNliF4osFDP0N19lNswaJ/3qWj/a3rgQapQ Tu67SIiOGv99RE6MBBZfAgMBAAGjggSVMIIEkTAOBgNVHQ8BAf8EBAMCBaAwHQYD VR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0O BBYEFHCRHOEl8fHjIRKhxRIrBAHFikd3MB8GA1UdIwQYMBaAFBQusxe3WFbLrlAJ QOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0cDovL3Iz Lm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5sZW5jci5vcmcv MIICZAYDVR0RBIICWzCCAleCFXNob3AuYmVzdHByb2R1Y3RzLmNvbYISc2hvcC5i aWN5Y2xpbmcuY29tghVzaG9wLmNvc21vcG9saXRhbi5jb22CFnNob3AuY291bnRy eWxpdmluZy5jb22CDXNob3AuZWxsZS5jb22CEnNob3AuZWxsZWRlY29yLmNvbYIQ c2hvcC5lc3F1aXJlLmNvbYIZc2hvcC5nb29kaG91c2VrZWVwaW5nLmNvbYIUc2hv cC5tYXJpZWNsYWlyZS5jb22CE3Nob3AubWVuc2hlYWx0aC5jb22CE3Nob3Aub3By YWhkYWlseS5jb22CGXNob3AucG9wdWxhcm1lY2hhbmljcy5jb22CE3Nob3AucHJl dmVudGlvbi5jb22CFXNob3Aucm9hZGFuZHRyYWNrLmNvbYISc2hvcC5zZXZlbnRl ZW4uY29tghpzaG9wLnRoZWZvb2RuZXR3b3JrbWFnLmNvbYITc2hvcC50aGVoZ3R2 bWFnLmNvbYIYc2hvcC50aGVwaW9uZWVyd29tYW4uY29tghpzaG9wLnRvd25hbmRj b3VudHJ5bWFnLmNvbYIQc2hvcC52ZXJhbmRhLmNvbYISc2hvcC53b21hbnNkYXku Y29tghhzaG9wLndvbWVuc2hlYWx0aG1hZy5jb22CFnN0b3JlLmNhcmFuZGRyaXZl ci5jb22CEHN0b3JlLmRlbGlzaC5jb22CF3N0b3JlLmhhcnBlcnNiYXphYXIuY29t ghZzdG9yZS5ydW5uZXJzd29ybGQuY29tgg50aGVoZ3R2bWFnLmNvbTBMBgNVHSAE RTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRw Oi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQMGCisGAQQB1nkCBAIEgfQEgfEA7wB2 APZclC/RdzAiFFQYCDCUVo7jTRMZM7/fDC8gC8xO8WTjAAABfDNoKTsAAAQDAEcw RQIgeoHs5A9BfCtxxng3vEqD3n7dk+wXe5gZKSR8OufltukCIQC7fmU+J266NH0f R7jpi0mxWrj97F5Tw0NAlTCLjddCswB1AESUZS6w7s6vxEAH2Kj+KMDa5oK+2Msx tT/TM5a1toGoAAABfDNoKVkAAAQDAEYwRAIgOZvuZufFefYuAmlCdLM/JQfz9zWU FispRAvPxd2X7uICIAsUyv16NBPRJaee1cRo7B6ybe3HS0pR6MXTlV4GsyiDMA0G CSqGSIb3DQEBCwUAA4IBAQACHWWZ6dU8toeldsGobNMNduaYWmP/RjgSL5ak/iNB AryELazpzZANLuxtKbyMleKH0qgUbxsu02ow/LuNdKPetysQPQiUq9Da55k2ByaH KNxE/X7W5MLDKSFhNAFe/zLR6bT3wZaP3NMW/yNSBdBWDlOHbllsPVTdVzNQw8xk 9dix9sL+bsxAiNtRgV5Mw49NYIPr0FL55/9ofDww5Zillg0doH3lhTB11aYbj1H7 989WAz3EyikWrevXM7kax7JymQ0DbExPu19cyzksNCkNXP13W+2o4I6DwvwyWDOK +19cZsiQN3DosI+y7ekEyBHtLIyvyI3AVfS5E/dfY4+R -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1huGLUT5c6pt1WO5374C UpXrWj++Kkgq3OiIq9AAe6MsDEdb03skh+lqY5+lNv1v/hNFrM1b0USjfATyuOzX KcWtixj0Wipevm0+eLYdna7aSuPezQc+yue2OgSK10O3GE7v38MJ3BbGb3tWNS80 ThTEKwjFucWnMVHLfrcjaoV4gfQnspfgPxhPKkzU+AfHqjvCEIJJHYT+krRAQyMU ppWStgN2ftEh6Sme6nS6QvV6EkuKSGAuhin/+pBbmCvGF2/qHt29F2eX5g250+gs 7sF2ter6UlUjZYheKLBQz9DdfZTbMGif96lo/2t64EGqUE7uu0iIjhr/fUROjAQW XwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 415054734024067278420287577283618087963988 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-09-29 20:13:56 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-28 20:13:55 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'shop.elle.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27028569916239649349940109551289363746730055514656918895658889282387430703074089732555147709283152349272157880412358294443322464574878439365871964099906563618459685612069334920693257242821202304235305368377438461669670753995801314509514024452668211674114087113672808234741110214333571144539995895935732242711921559329555869813520522928942152352481283366308627150764977706343250461893381492921827811923653239866894737466079985563019520422358905254986878452748763599321790317290644562587103671139106491848270404325479531180785199351292649495652561479401967167376655075762112035503455233818294805756442570847822280922719 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 70911ce125f1f1e32112a1c5122b0401c58a4777 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (603 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.bestproducts.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.bicycling.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.cosmopolitan.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.countryliving.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.elle.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.elledecor.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.esquire.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.goodhousekeeping.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.marieclaire.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.menshealth.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.oprahdaily.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.popularmechanics.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.prevention.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.roadandtrack.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.seventeen.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.thefoodnetworkmag.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.thehgtvmag.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.thepioneerwoman.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.townandcountrymag.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.veranda.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.womansday.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.womenshealthmag.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.caranddriver.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.delish.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.harpersbazaar.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.runnersworld.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thehgtvmag.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007600f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e30000017c3368293b000004030047304502207a81ece40f417c2b71c67837bc4a83de7edd93ec177b981929247c3ae7e5b6e9022100bb7e653e276eba347d1f47b8e98b49b15ab8fdec5e53c3434095308b8dd742b30075004494652eb0eeceafc44007d8a8fe28c0dae682bed8cb31b53fd33396b5b681a80000017c3368295900000403004630440220399bee66e7c579f62e02694274b33f2507f3f73594162b29440bcfc5dd97eee202200b14cafd7a3413d125a79ed5c468ec1eb26dedc74b4a51e8c5d3955e06b32883 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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