*.preview.www.huffpost.com

Issued by Amazon RSA 2048 M01

About this certificate

This digital certificate with serial number 0b:b8:9c:b5:38:bb:bc:88:dc:fc:8e:35:a8:16:a9:41 was issued on by Amazon.

With 78 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.preview.www.huffpost.com

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0b:b8:9c:b5:38:bb:bc:88:dc:fc:8e:35:a8:16:a9:41
Serial Number (int): 15580068989358187635865720955952605505
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: cb:1f:e8:f3:89:97:b4:3c:6d:6f:46:a2:d4:1f:26:c2:e9:2b:97:9e
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85

Fingerprint (sha1): 31:ed:3d:65:d4:a2:05:9b:5e:ad:89:33:e9:39:bf:7d:f9:99:1d:66
Fingerprint (sha256): 1b:9e:ab:b6:4e:b2:23:43:6f:03:a4:30:cb:1c:de:70:36:9c:92:01:16:4a:a1:cc:73:50:94:ef:87:d1:8e:ee

Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer

Revocation information

OCSP Server: http://ocsp.r2m01.amazontrust.com
CRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl

Check the revocation status for certificate *.preview.www.huffpost.com

78

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.preview.www.huffpost.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.preview.www.huffpost.com
www.huffpost.com
*.preview.www.huffingtonpost.fr
*.preview.thespoils.huffpost.co.uk
m.huffingtonpost.com.au
*.www.huffingtonpost.kr
*.quebec.huffingtonpost.ca
m.huffingtonpost.it
*.www.huffingtonpost.ca
*.m.huffingtonpost.com.au
www.huffingtonpost.gr
quebec.huffingtonpost.ca
*.preview.www.huffingtonpost.jp
www.huffingtonpost.kr
m.huffingtonpost.es
www.huffingtonpost.com.au
*.www.huffingtonpost.fr
m.huffpost.com
*.preview.www.huffingtonpost.gr
*.m.huffingtonpost.es
*.preview.m.huffingtonpost.kr
*.preview.m.huffingtonpost.ca
*.m.huffingtonpost.it
www.huffingtonpost.fr
*.preview.www.huffingtonpost.kr
m.huffingtonpost.co.uk
www.huffingtonpost.co.uk
*.preview.www.huffingtonpost.ca
www.huffingtonpost.ca
*.www.huffingtonpost.gr
*.preview.m.huffingtonpost.gr
m.huffingtonpost.co.za
*.preview.m.huffingtonpost.jp
m.huffingtonpost.kr
m.quebec.huffingtonpost.ca
www.huffingtonpost.es
m.huffingtonpost.gr
*.m.huffingtonpost.fr
*.www.huffingtonpost.com
*.preview.m.huffpost.com
*.www.huffingtonpost.co.za
www.huffingtonpost.it
*.m.huffingtonpost.co.za
*.m.huffingtonpost.jp
*.preview.www.huffingtonpost.co.uk
*.preview.m.huffingtonpost.com.au
www.huffingtonpost.jp
*.www.huffpost.com
www.huffingtonpost.com
*.preview.m.quebec.huffingtonpost.ca
*.preview.www.huffingtonpost.com
www.huffingtonpost.co.za
*.preview.m.huffingtonpost.fr
*.preview.m.huffingtonpost.co.uk
*.preview.www.huffingtonpost.co.za
*.www.huffingtonpost.co.uk
m.huffingtonpost.ca
*.m.huffingtonpost.co.uk
*.thespoils.huffpost.co.uk
*.preview.www.huffingtonpost.it
*.www.huffingtonpost.jp
*.preview.quebec.huffingtonpost.ca
*.m.quebec.huffingtonpost.ca
*.preview.www.huffingtonpost.es
m.huffingtonpost.jp
*.m.huffingtonpost.gr
*.preview.www.huffingtonpost.com.au
m.huffingtonpost.fr
*.preview.m.huffingtonpost.co.za
*.m.huffingtonpost.kr
thespoils.huffpost.co.uk
*.m.huffingtonpost.ca
*.preview.m.huffingtonpost.es
*.www.huffingtonpost.it
*.www.huffingtonpost.es
*.preview.m.huffingtonpost.it
*.m.huffpost.com
*.www.huffingtonpost.com.au

Other certificates including the domain name huffpost.com

(limited to 100 certificates)
checkout.yahoo.com
qa5.add.my.aol.com
staging-origin-life.huffpo.net
preview.www.huffpost.com
*.preview.www.huffpost.com
qa.mapi.huffpost.com
coupons.huffpost.com
link.huffpost.com
*.aol.com
*.add.my.aol.com
checkout.yahoo.com
img.huffingtonpost.com
www.huffingtonpost.com
*.login.yahoo.com
consent.oath.com
*.dev.buzzfeed.io
cmp.huffpost.com
production.mapi.huffpost.com
img.staging.huffingtonpost.com
qa.mapi.huffpost.com
src5.yahoo.com
staging-origin-life.huffpo.net
beta-origin-cambria-alb.huffpo.net
staging.mapi.huffpost.com
staging.www.huffingtonpost.com
*.aol.com
stage.consent.oath.com
stage.guce2.oath.com
cmp.huffpost.com
production-kraken-valencia-preview.use1.huffpo.net
*.search.yahoo.com
secure.huffingtonpost.com
checkout.yahoo.com
link.huffpost.com
dev.checkout.yahoo.com
huffpost.com
qa.preview.www.huffpost.com
*.aol.com
stage.consent.oath.com
api.huffpost.com
link.huffpost.com
cmp.huffpost.com
*.dev.buzzfeed.io
*.trunk.login.yahoo.com
stage.consent.oath.com
cmp.huffpost.com
*.search.yahoo.com
stage.guce2.oath.com
modulous.huffpost.com
stage.oidc.oath.com
qa.preview.www.huffpost.com
stage.consent.oath.com
staging.www.huffingtonpost.com
www.huffpost.com
mapi.huffpost.com
*.stage.login.yahoo.com
auth.stage.huffpost.com
www.huffpost.com
dev.search.yahoo.com
origin-kraken.huffpo.net
beta-origin-cambria-alb.huffpo.net
se.emails.huffpost.com
*.search.yahoo.com
assist.aol.com
qa.preview.www.huffpost.com
www.huffingtonpost.com
*.login.yahoo.com
www.huffingtonpost.com
*.login.yahoo.com
beta.www.huffpost.com
modulous.huffpost.com
elections.huffingtonpost.com
src5.yahoo.com
src5.yahoo.com
*.aol.com
*.contributor.huffingtonpost.com
*.search.yahoo.com
cmp.huffpost.com
guce2.oath.com
origin-kraken.huffpo.net
src5.yahoo.com
checkout.yahoo.com
checkout.yahoo.com
stage.guce2.oath.com
*.assets.huffingtonpost.com
*.stage.login.yahoo.com
dev.checkout.yahoo.com
dev.checkout.yahoo.com
auth.stage.huffpost.com
trunk.consent.oath.com
*.stage.login.yahoo.com
dev.search.yahoo.com
se.emails.huffpost.com
*.stage.login.yahoo.com
*.search.yahoo.com
huffpost.com
stage.guce.huffpost.com
www.huffingtonpost.com
auth.huffpost.com
consent.oath.com

Certificate

The complete raw certificate details for *.preview.www.huffpost.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwvrluTK04p791h6fmPN
ItVuNxJ/nwjuTDqDHrqpG2y28Od/dkdJejEROitHb9CX4bhP1yppVvWP9IyFY4jc
JuRmtKHWLWPyzKeq9yay5RquAPnqslLI+BS4hUvqRtXHW7WzZ04TeQzRXoQ5BBZL
dPo55UR3Om7F1Z/WTRvfdkGLqnuZY2Tx6K37386sru5v+jLy0xgDYz/WNr2ejh7x
T0OhtKZommJ5GjOhFcnSm2XYGU57Ikps7RK8bby2bRiPopHFnV5j5Uoe/99+PF4Z
U36ROUNt/9uHEUYkoi6Sw52gb68U59xqzQV8c6XZmmqAiYhp21ELf3J25Qbwv47d
8QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15580068989358187635865720955952605505
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-19 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-19 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.preview.www.huffpost.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25127300793057036090325224340612157285123941200132097794476723018022062545678140720992847194399165187144595369468181452340984908970744861304222413340420174939626449609943669219359769035439696171050062406753306379213582227759616802564694114691785104219651213680159920621162615231596665784117896064698025734984629538920961848977458073563933238362966459967333891086982030332579623135936215424947370468614468399029566577822523976452395898115853008811805216246713883552379785156326419035415819949390092778487757399030953101069830203474553079599993309199038490334956286189425260277173066925484572588216156980777547788639729
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cb1fe8f38997b43c6d6f46a2d41f26c2e92b979e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.preview.www.huffpost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.huffpost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.preview.www.huffingtonpost.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.preview.thespoils.huffpost.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.huffingtonpost.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.www.huffingtonpost.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.quebec.huffingtonpost.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.huffingtonpost.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.www.huffingtonpost.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.m.huffingtonpost.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.huffingtonpost.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quebec.huffingtonpost.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.preview.www.huffingtonpost.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.huffingtonpost.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.huffingtonpost.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.huffingtonpost.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.www.huffingtonpost.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.huffpost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.preview.www.huffingtonpost.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.m.huffingtonpost.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.preview.m.huffingtonpost.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.preview.m.huffingtonpost.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.m.huffingtonpost.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.huffingtonpost.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.preview.www.huffingtonpost.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.huffingtonpost.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.huffingtonpost.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.preview.www.huffingtonpost.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.huffingtonpost.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.www.huffingtonpost.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.preview.m.huffingtonpost.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.huffingtonpost.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.preview.m.huffingtonpost.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.huffingtonpost.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.quebec.huffingtonpost.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.huffingtonpost.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.huffingtonpost.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.m.huffingtonpost.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.www.huffingtonpost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.preview.m.huffpost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.www.huffingtonpost.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.huffingtonpost.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.m.huffingtonpost.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.m.huffingtonpost.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.preview.www.huffingtonpost.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.preview.m.huffingtonpost.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.huffingtonpost.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.www.huffpost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.huffingtonpost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.preview.m.quebec.huffingtonpost.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.preview.www.huffingtonpost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.huffingtonpost.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.preview.m.huffingtonpost.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.preview.m.huffingtonpost.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.preview.www.huffingtonpost.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.www.huffingtonpost.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.huffingtonpost.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.m.huffingtonpost.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thespoils.huffpost.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.preview.www.huffingtonpost.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.www.huffingtonpost.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.preview.quebec.huffingtonpost.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.m.quebec.huffingtonpost.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.preview.www.huffingtonpost.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.huffingtonpost.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.m.huffingtonpost.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.preview.www.huffingtonpost.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.huffingtonpost.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.preview.m.huffingtonpost.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.m.huffingtonpost.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thespoils.huffpost.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.m.huffingtonpost.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.preview.m.huffingtonpost.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.www.huffingtonpost.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.www.huffingtonpost.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.preview.m.huffingtonpost.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.m.huffpost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.www.huffingtonpost.com.au'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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