staging.www.huffingtonpost.com

- Verizon Digital Media Services, Inc. -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 03:c8:58:76:02:c7:89:61:2a:d6:13:63:b2:24:d1:f8 was issued on by DigiCert Inc.

With 70 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Verizon Digital Media Services, Inc.

Organization: Verizon Digital Media Services, Inc.
State / Province: California
Locality: Los Angeles
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c8:58:76:02:c7:89:61:2a:d6:13:63:b2:24:d1:f8
Serial Number (int): 5027937560890206188981669390941737464
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 10:45:ef:d3:3a:36:2b:c0:c3:54:ea:28:1b:b3:57:8e:ec:0e:7d:2a
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): ce:bb:d9:83:23:be:1a:60:a1:0e:d1:7b:40:ac:54:21:06:8b:a1:66
Fingerprint (sha256): 16:b6:3c:e0:4b:30:c7:33:49:85:67:79:39:87:1a:a5:e4:f8:b8:50:41:a3:3e:ac:06:54:5d:70:c2:27:93:31

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1.crl

Check the revocation status for certificate staging.www.huffingtonpost.com

70

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for staging.www.huffingtonpost.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

staging.www.huffingtonpost.com
m.staging.www.huffingtonpost.jp
m.staging.www.huffingtonpost.gr
staging.www.huffingtonpost.gr
beta.www.huffpostmaghreb.com
staging.www.huffpostmaghreb.com
staging.www.huffpost.com
staging.m.huffpost.com
staging.www.huffingtonpost.com.mx
m.staging.www.huffingtonpost.com.mx
staging.quebec.huffingtonpost.ca
m.staging.quebec.huffingtonpost.ca
beta.www.huffpostbrasil.com
m.beta.www.huffpostbrasil.com
beta.www.huffingtonpost.ca
m.beta.www.huffingtonpost.ca
beta.www.huffingtonpost.es
m.beta.www.huffingtonpost.es
qa.thespoils.huffpost.co.uk
staging.thespoils.huffpost.co.uk
m.beta.quebec.huffingtonpost.ca
beta.quebec.huffingtonpost.ca
m.beta.www.huffingtonpost.com.mx
beta.www.huffingtonpost.com.mx
beta.www.huffingtonpost.gr
m.beta.www.huffingtonpost.jp
m.beta.www.huffingtonpost.it
beta.www.huffingtonpost.it
m.beta.www.huffingtonpost.in
beta.www.huffingtonpost.in
m.beta.www.huffingtonpost.fr
beta.www.huffingtonpost.fr
beta.www.huffingtonpost.jp
m.beta.www.huffingtonpost.gr
staging.www.huffingtonpost.de
staging.www.huffingtonpost.co.za
staging.www.huffingtonpost.it
m.staging.www.huffingtonpost.in
staging.www.huffingtonpost.in
m.staging.www.huffingtonpost.fr
staging.www.huffingtonpost.fr
m.staging.www.huffingtonpost.es
staging.www.huffingtonpost.es
m.staging.www.huffingtonpost.ca
staging.www.huffingtonpost.ca
m.staging.www.huffpostbrasil.com
staging.www.huffpostbrasil.com
m.beta.www.huffingtonpost.co.za
beta.www.huffingtonpost.co.za
m.staging.www.huffingtonpost.co.za
m.staging.www.huffingtonpost.de
m.beta.www.huffingtonpost.com.au
beta.www.huffingtonpost.com.au
beta.www.huffingtonpost.de
m.beta.www.huffingtonpost.de
staging.www.huffingtonpost.kr
m.staging.www.huffingtonpost.kr
beta.www.huffingtonpost.kr
m.beta.www.huffingtonpost.kr
m.staging.www.huffingtonpost.it
staging.www.huffingtonpost.co.uk
beta.www.huffingtonpost.co.uk
m.beta.www.huffingtonpost.co.uk
qa.www.huffpost.com
qa.www.huffingtonpost.com
staging.www.huffingtonpost.com.au
m.staging.www.huffingtonpost.com.au
m.staging.www.huffingtonpost.co.uk
staging.www.huffingtonpost.jp
staging.m.huffingtonpost.jp

Other certificates including the domain name huffingtonpost.com

(limited to 100 certificates)
qa5.add.my.aol.com
*.preview.www.huffpost.com
qa.mapi.huffpost.com
*.app-west.buzzfeed.io
*.aol.com
*.add.my.aol.com
pr.huffingtonpost.com
img.huffingtonpost.com
www.huffingtonpost.com
*.contributor.huffingtonpost.com
content.huffingtonpost.com
staging-userapi.huffingtonpost.com
img.staging.huffingtonpost.com
accounts.huffingtonpost.com
qa.mapi.huffpost.com
src5.yahoo.com
beta-origin-cambria-alb.huffpo.net
staging.www.huffingtonpost.com
*.aol.com
stage.guce.oath.com
production-kraken-valencia-preview.use1.huffpo.net
accounts.huffingtonpost.com
*.search.yahoo.com
secure.huffingtonpost.com
b.aol.com
*.aol.com
huffingtonpost.com
athena.huffingtonpost.com
huffingtonpost.com
src1.yahoo.com
*.search.yahoo.com
trunk.guce.oath.com
trunk.guce.oath.com
qa.preview.www.huffpost.com
staging.www.huffingtonpost.com
www.huffpost.com
huffingtonpost.com
accounts.huffingtonpost.com
ifthisartcouldvote.huffingtonpost.com
www.huffpost.com
dev.search.yahoo.com
origin-kraken.huffpo.net
beta-origin-cambria-alb.huffpo.net
*.search.yahoo.com
qa.preview.www.huffpost.com
www.huffingtonpost.com
stage.guce.oath.com
www.huffingtonpost.com
*.assets.huffingtonpost.com
origin-img.huffingtonpost.com
elections.huffingtonpost.com
src5.yahoo.com
src5.yahoo.com
*.aol.com
*.contributor.huffingtonpost.com
*.search.yahoo.com
*.prod.buzzfeed.io
ifthisartcouldvote.huffingtonpost.com
origin-kraken.huffpo.net
src5.yahoo.com
staging-athena-mongo-cms.huffpost.net
ifthisartcouldvote.huffingtonpost.com
news.huffingtonpost.com
*.assets.huffingtonpost.com
stage.guce.oath.com
*.prod.buzzfeed.io
content.staging.huffingtonpost.com
dev.search.yahoo.com
ifthisartcouldvote.huffingtonpost.com
*.search.yahoo.com
guce.oath.com
www.huffingtonpost.com
editorial.huffingtonpost.com
src1.yahoo.com
staging.www.huffingtonpost.com
qa.preview.www.huffpost.com
*.search.yahoo.com
editorial.huffingtonpost.com
*.stage.buzzfeed.io
src6.yahoo.com
accounts.huffingtonpost.com
*.prod.buzzfeed.io
*.stage.buzzfeed.io
src1.yahoo.com
src6.yahoo.com
*.preview.www.huffpost.com
staging.preview.www.huffpost.com
secure.huffingtonpost.com
secure.huffingtonpost.com
ifthisartcouldvote.huffingtonpost.com
*.app-west.buzzfeed.io
huffingtonpost.com
ws.huffingtonpost.com
qa.mapi.huffpost.com
secure.huffingtonpost.com
*.add.my.aol.com
preview.www.huffpost.com
origin-kraken.huffpo.net
trunk.guce.oath.com
sp.huffingtonpost.com

Certificate

The complete raw certificate details for staging.www.huffingtonpost.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhYQkZGWf0vsap8fT8SyQ
DV1HE1s+b2nfuyRCp1a6+6tL+L/QAfLDzIYPpp2iSJO9S+R6ZQoL9068+39PxhL+
Ukg1JD819kUU1Aq/ut0eliBwbba4z/buyEmiqGoJsWaWvw9B8zmOthT1mG15wIQm
+c4FCWIRJgfmiMSoQQI8lw3CEp3N6QqWRwSQvxdugrQRKvaK3c3m9YlAlGGUR0ki
DduprGb0Gn9JtSpnIYb3HPl+RfuQ7PR2pyH4gCAOH5tdYi0vY8zpJ3ozaiAWe6YZ
4yOIy/gRG/LjXR256DLvz22nUEOF5eEJ0emQuYfA7/CU2yiEwtuYszwPXPBtBPfh
0QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5027937560890206188981669390941737464
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-01-20 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-01-19 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Los Angeles'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Verizon Digital Media Services, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'staging.www.huffingtonpost.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 16854856286681824866856228824172905004309126756011283264196136936622224037879515608938394752069924344932264981921703348252977942864421410161006967270499917669492771375395744817656353228200658259290697639026944100973932292646436495652263527507471484978603353208728562383741053803057821925963741594391073775841436519089916707128455289982615713102910892553466354562978100434756247386357830840939708387150742317361535880765501295655551353147534133614007310066860006805479413299898182732432456217465739606155822856082476679831267599092667303608860668750925881440700076785832784738229328645249097937238076933720950561038801
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1045efd33a362bc0c354ea281bb3578eec0e7d2a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2191 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.www.huffingtonpost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.staging.www.huffingtonpost.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.staging.www.huffingtonpost.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.www.huffingtonpost.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.www.huffpostmaghreb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.www.huffpostmaghreb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.www.huffpost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.m.huffpost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.www.huffingtonpost.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.staging.www.huffingtonpost.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.quebec.huffingtonpost.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.staging.quebec.huffingtonpost.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.www.huffpostbrasil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.beta.www.huffpostbrasil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.www.huffingtonpost.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.beta.www.huffingtonpost.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.www.huffingtonpost.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.beta.www.huffingtonpost.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.thespoils.huffpost.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.thespoils.huffpost.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.beta.quebec.huffingtonpost.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.quebec.huffingtonpost.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.beta.www.huffingtonpost.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.www.huffingtonpost.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.www.huffingtonpost.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.beta.www.huffingtonpost.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.beta.www.huffingtonpost.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.www.huffingtonpost.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.beta.www.huffingtonpost.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.www.huffingtonpost.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.beta.www.huffingtonpost.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.www.huffingtonpost.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.www.huffingtonpost.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.beta.www.huffingtonpost.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.www.huffingtonpost.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.www.huffingtonpost.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.www.huffingtonpost.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.staging.www.huffingtonpost.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.www.huffingtonpost.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.staging.www.huffingtonpost.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.www.huffingtonpost.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.staging.www.huffingtonpost.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.www.huffingtonpost.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.staging.www.huffingtonpost.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.www.huffingtonpost.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.staging.www.huffpostbrasil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.www.huffpostbrasil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.beta.www.huffingtonpost.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.www.huffingtonpost.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.staging.www.huffingtonpost.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.staging.www.huffingtonpost.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.beta.www.huffingtonpost.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.www.huffingtonpost.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.www.huffingtonpost.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.beta.www.huffingtonpost.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.www.huffingtonpost.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.staging.www.huffingtonpost.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.www.huffingtonpost.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.beta.www.huffingtonpost.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.staging.www.huffingtonpost.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.www.huffingtonpost.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.www.huffingtonpost.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.beta.www.huffingtonpost.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.www.huffpost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.www.huffingtonpost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.www.huffingtonpost.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.staging.www.huffingtonpost.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.staging.www.huffingtonpost.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.www.huffingtonpost.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.m.huffingtonpost.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (131 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (113 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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