secure-api.scrippsnetworks.com

- Scripps Networks LLC -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 08:44:97:7d:e9:1e:b1:24:c7:ad:6d:1a:a5:79:a6:43 was issued on by DigiCert Inc.

With 90 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Scripps Networks LLC

Organization: Scripps Networks LLC
Organization unit: Akamai SAN SSL OV
State / Province: Tennessee
Locality: Knoxville
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 08:44:97:7d:e9:1e:b1:24:c7:ad:6d:1a:a5:79:a6:43
Serial Number (int): 10989972772177272547547116275160950339
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 6e:1c:0f:7f:cb:62:8a:dd:71:c7:02:2f:69:6b:67:5d:fd:8b:ee:dd
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): 1e:cd:26:e3:46:e4:88:61:30:6f:f0:92:42:6a:00:99:e3:bf:bc:dd
Fingerprint (sha256): 12:0f:0b:02:13:a5:9c:53:e3:01:fe:1f:8f:d0:a5:5c:bd:67:87:95:09:64:dd:a2:d8:15:af:8b:ed:b7:18:ad

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate secure-api.scrippsnetworks.com

90

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for secure-api.scrippsnetworks.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

secure-api.scrippsnetworks.com
www.diynetwork.com
www.qa-food.com
www.foodnetwork.com
www.dev-geniuskitchen.com
pictures.hgtv.com
pictures.food.com
statics.stage-scrippsnetworks.com
investigationdiscovery.sndimg.com
www.cookingchanneltv.com
videos.hgtv.com
secure-api.hgtv.com
watch.foodnetwork.com
tlc.sndimg.com
img.qa1-food.com
www.qa1-foodnetwork.com
qa1-food.sndimg.com
watch.travelchannel.com
statics.scrippsnetworks.com
secure-api.diynetwork.com
kitchen.foodnetwork.com
qa-geniuskitchen.com
travel.tc.sndimg.com
pictures.cookingchanneltv.com
failover5xx.greatamericancountry.com
dev-geniuskitchen.sndimg.com
click.fnr.sndimg.com
img.sndimg.com
geniuskitchen.sndimg.com
food.fnr.sndimg.com
pictures.travelchannel.com
img-nonprod.sndimg.com
failover5xx.diynetwork.com
home.loadtest.home.sndimg.com
qa-geniuskitchen.sndimg.com
watch.qa-geniuskitchen.com
www.hgtv.com
www.travelchannel.loadtest.sni.hgtv.com
images.scrippsnetworks.com
photos.hgtv.com
geniuskitchen.com
watch.hgtv.com
pictures.foodnetwork.com
beta-api.scrippsnetworks.com
secure-api.food.com
food.com
travel.fnr.sndimg.com
pictures.diynetwork.com
www.geniuskitchen.com
img.food.com
discovery.sndimg.com
blue.foodnetwork.com
beta-api.foodnetwork.com
www.stage-foodnetwork.com
www.chromecast.video.snidigital.com
www.qa-geniuskitchen.com
beta-api.food.com
beta.greatamericancountry.com
food.sndimg.com
www.food.com
www.hgtvremodels.com
www.travelchannel.com
pictures.gactv.com
people.greatamericancountry.com
secure-api.foodnetwork.com
people.hgtv.com
api.foodnetworkinteractive.com
gac.sndimg.com
qa-food.com
cook.fnr.sndimg.com
watch.diynetwork.com
qa.fnkweb.sni.foodnetwork.com
people.diynetwork.com
failover5xx.hgtv.com
www.sndimg.com
foodnetwork.com
cookingchanneltv.com
hgtvhome.sndimg.com
diy.sndimg.com
beta.diynetwork.com
www.discovery.com
travel.loadtest.home.sndimg.com
www.greatamericancountry.com
watch.cookingchanneltv.com
beta.hgtv.com
click.home.sndimg.com
travel.home.sndimg.com
watch.geniuskitchen.com
dev-geniuskitchen.com
www.tlcme.com

Other certificates including the domain name scrippsnetworks.com

(limited to 100 certificates)
peoplesoftdemo-ren.scrippsnetworks.com
mamcloud-int.scrippsnetworks.com
secure-api.scrippsnetworks.com
connect2vpn.scrippsnetworks.com
secure-api.scrippsnetworks.com
mediapulse.scrippsnetworks.com
san-6-s13.tlsprovisioning.exacttarget.com
mysite.insidesni.com
orders.scrippsnetworks.com
mam.scrippsnetworks.com
idmanager.scrippsnetworks.com
vpntest.scrippsnetworks.com
mysecure.qa2-cookingchanneltv.com
snkxs078.scrippsnetworks.com
myscripps.scrippsnetworks.com
jsseng.scrippsnetworks.com
secure-api.scrippsnetworks.com
mynewsletters.scrippsnetworks.com
san-6-s13.tlsprovisioning.exacttarget.com
securestatics.scrippsnetworks.com
*.scrippsnetworks.com
timereporting.scrippsnetworks.com
orders.scrippsnetworks.com
jssadmin.scrippsnetworks.com
sniidevices.scrippsnetworks.com
secure-api.scrippsnetworks.com
sales.scrippsnetworks.com
secure-api.scrippsnetworks.com
mamcloud-dev.scrippsnetworks.com
mynewsletters.discovery.com
alfintlqa2.scrippsnetworks.com
mam.scrippsnetworks.com
boecloud-qa.scrippsnetworks.com
snkxvoip-expe-cluster01.scrippsnetworks.com
secure-api.scrippsnetworks.com
secure-api.scrippsnetworks.com
secure-api.scrippsnetworks.com
mysecure.dev-travelchannel.com
secure-api.scrippsnetworks.com
audit.scrippsnetworks.com
secure-api.scrippsnetworks.com
fgs-qa.scrippsnetworks.com
faspexglobal.scrippsnetworks.com
peoplesoftdev-ren.scrippsnetworks.com
*.scrippsnetworks.com
faspex.scrippsnetworks.com
dev-apps.scrippsnetworks.com
sarbox404.scrippsnetworks.com
mynewsletters.discovery.com
sniforms.scrippsnetworks.com
sniforms.scrippsnetworks.com
mamcloud-int.scrippsnetworks.com
qa2-mysecure.scrippsnetworks.com
*.scrippsnetworks.com
idam.scrippsnetworks.com
hrapprovals.scrippsnetworks.com
orders.scrippsnetworks.com
orders.scrippsnetworks.com
fgs-int.scrippsnetworks.com
mediapulse.scrippsnetworks.com
mamcloud-dev.scrippsnetworks.com
doa.scrippsnetworks.com
mysecure.staging-foodnetwork.com
partnerweb.scrippsnetworks.com
pressreleases.scrippsnetworks.com
secure-api.scrippsnetworks.com
orders.scrippsnetworks.com
recognitionprograms.scrippsnetworks.com
vpntest.scrippsnetworks.com
snkxvoip-expc-cluster01.scrippsnetworks.com
qa1-moderation.scrippsnetworks.com
slate.scrippsnetworks.com
wiki.scrippsnetworks.com
san-6-s13.tlsprovisioning.exacttarget.com
snkxvoip-expe02.scrippsnetworks.com
mamcloud.scrippsnetworks.com
statics2.scrippsnetworks.com
jsseng.scrippsnetworks.com
sniidevices.scrippsnetworks.com
secure-api.scrippsnetworks.com
snkxise01-admin.scrippsnetworks.com
hmp.scrippsnetworks.com
apimami.scrippsnetworks.com
snkxvoip-expe-cluster01.scrippsnetworks.com
partner.scrippsnetworks.com
alfdomuat.scrippsnetworks.com
peoplesoftdemo-ren.scrippsnetworks.com
tableaucloud.scrippsnetworks.com
secure-api.scrippsnetworks.com
archerweb-uat.scrippsnetworks.com
secure-api.scrippsnetworks.com
adsremote.scrippsnetworks.com
*.scrippsnetworks.com
sarbox404.scrippsnetworks.com
peoplesoftdev2.scrippsnetworks.com
boecloud.scrippsnetworks.com
scrippsnetworks.com
mysecure.scrippsnetworks.com
connect2vpnc.scrippsnetworks.com
secure-api.scrippsnetworks.com

Certificate

The complete raw certificate details for secure-api.scrippsnetworks.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwt3EXYi7uYoPxrJkylN
B6TvI6JHnMPgOrF2DMtLJsj2hQr2w6U4FY9E7E/aWXed/TAEWap03+aw6uM/cW38
bF8tYlH8QkaAEoV/NdFDFgX7gtIIdQH4nMUBntBsLGwb+DfeEBw942UaWigpslum
NRcUpGR6QLqWI0CEtDrbEW0eTzQuUT7AnoxUucwwckVybTcBhbs6FYHBAZiv0D9g
W4gatc3TESA81yt7Wvy6ECwhipJHv0e8yITUY7K4Xk83MkW4bU9aFz0HUSmsULDB
UdypT6nPa3+kxSxUYPw6sgVJ5KN/Q36mqyr3IoV4SO/2TCGiHaI2nX+QQ+z/qCYC
UQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10989972772177272547547116275160950339
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-19 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-19 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Tennessee'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Knoxville'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scripps Networks LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Akamai SAN SSL OV'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'secure-api.scrippsnetworks.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25127076344795461743852000420951629626567414425486517162083207142879450918247558420007394719284770882529076140867953920629356959691564777569942382985264275998935219566077672345131188879393435705635483942040406269326504230406692787252671633529869946176795581597640437148687097892202805220713122580410222084981647891531449349285595024462321824636315730453702780001117712769334624841575273746421755258739430978933958776981752574970104305377011336682752198301604897811298107736087817065745994608240425472769300825525126258184742980777741880294173141133789904960381174382158783365004630273350194997763956035420160203817553
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6e1c0f7fcb628add71c7022f696b675dfd8beedd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2117 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure-api.scrippsnetworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diynetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qa-food.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foodnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dev-geniuskitchen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pictures.hgtv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pictures.food.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'statics.stage-scrippsnetworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investigationdiscovery.sndimg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cookingchanneltv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'videos.hgtv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure-api.hgtv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watch.foodnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tlc.sndimg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'img.qa1-food.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qa1-foodnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa1-food.sndimg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watch.travelchannel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'statics.scrippsnetworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure-api.diynetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kitchen.foodnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-geniuskitchen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'travel.tc.sndimg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pictures.cookingchanneltv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'failover5xx.greatamericancountry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-geniuskitchen.sndimg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'click.fnr.sndimg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'img.sndimg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geniuskitchen.sndimg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'food.fnr.sndimg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pictures.travelchannel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'img-nonprod.sndimg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'failover5xx.diynetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'home.loadtest.home.sndimg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-geniuskitchen.sndimg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watch.qa-geniuskitchen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hgtv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.travelchannel.loadtest.sni.hgtv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.scrippsnetworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'photos.hgtv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geniuskitchen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watch.hgtv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pictures.foodnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta-api.scrippsnetworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure-api.food.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'food.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'travel.fnr.sndimg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pictures.diynetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.geniuskitchen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'img.food.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'discovery.sndimg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blue.foodnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta-api.foodnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stage-foodnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chromecast.video.snidigital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qa-geniuskitchen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta-api.food.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.greatamericancountry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'food.sndimg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.food.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hgtvremodels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.travelchannel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pictures.gactv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'people.greatamericancountry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure-api.foodnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'people.hgtv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.foodnetworkinteractive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gac.sndimg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-food.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cook.fnr.sndimg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watch.diynetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.fnkweb.sni.foodnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'people.diynetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'failover5xx.hgtv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sndimg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foodnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cookingchanneltv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hgtvhome.sndimg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diy.sndimg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.diynetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.discovery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'travel.loadtest.home.sndimg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greatamericancountry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watch.cookingchanneltv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.hgtv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'click.home.sndimg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'travel.home.sndimg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watch.geniuskitchen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-geniuskitchen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tlcme.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e000001705f626b8b0000040300463044022065145487348517456790fc7c9e1d5eafcc9c880f48ed7807028d0e9d77f3881d02202ccf9d6d5665ecb9c38cdc5e4ac18f1dc0ad23ed4893a5426a0c7b57e5c56779007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb273000001705f626bee0000040300473045022061b28c2d36aa8f5b3b0d7ec4c48a23f02f6f4e2ca7bdc43ea4f249281fbecab9022100f57c21688cec59028a21029d96f23cbb328c747a0b8268dfcc54d213d3a645c4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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