mail.hearst.co.uk
Issued by COMODO SSL CA
About this certificate
This digital certificate with serial number 4f:e9:e5:93:15:26:eb:ea:8a:09:e4:01:53:6d:5f:84 was issued on by COMODO CA Limited.
With 12 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DNSNames must have a valid TLD. (BRs: 3.2.2.4)
- 2 DNS name(s) are bare public suffixes: RUKEXMTC01, RUKEXMTC02 The domain SHOULD NOT have a bare public suffix (awslabs certlint)
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=mail.hearst.co.uk,OU=Domain Control Validated+OU=COMODO SSL Unified Communications
COMODO CA Limited
Organization:
COMODO CA Limited
State / Province:
Greater Manchester
Locality: Salford
Country: GB
Locality: Salford
Country: GB
This certificate has expire since
Certificate Details
Serial Number (hex): 4f:e9:e5:93:15:26:eb:ea:8a:09:e4:01:53:6d:5f:84Serial Number (int): 106223473159932333096234995491250462596
Serial Number lenght: 127 bits, 16 octets
SubjectKeyId: 14:44:c3:1c:85:91:85:00:0e:92:e1:e3:33:0a:1e:7f:bc:04:21:1b
AuthorityKeyId: 1b:6b:bd:1f:8a:49:18:94:54:37:55:b4:20:17:ed:37:b9:77:18:7d
Fingerprint (sha1): b2:44:cb:c7:7b:49:2e:15:5d:60:69:69:2b:a3:e7:cd:c9:e7:48:b4
Fingerprint (sha256): 1c:32:41:41:cd:91:a5:de:4f:c0:9e:b7:2a:33:1f:33:18:ba:55:1c:0f:61:5d:6e:f8:e6:94:ab:ca:ce:7f:fe
Issuing Certificate URL: http://crt.comodoca.com/COMODOSSLCA.crt
Revocation information
OCSP Server: http://ocsp.comodoca.comCRL Distribution Point: http://crl.comodoca.com/COMODOSSLCA.crl
Check the revocation status for certificate mail.hearst.co.uk
12
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for mail.hearst.co.uk
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA1 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
mail.hearst.co.uk
RUKEXMTC01
RUKEXMTC01.resource.hearstcorp.com
RUKEXMTC02
RUKEXMTC02.resource.hearstcorp.com
autodiscover.comag.co.uk
autodiscover.gkm.comag.co.uk
autodiscover.hearst.co.uk
autodiscover.natmags.co.uk
mail.comag.co.uk
mail.gkm.comag.co.uk
mail.natmags.co.uk
RUKEXMTC01
RUKEXMTC01.resource.hearstcorp.com
RUKEXMTC02
RUKEXMTC02.resource.hearstcorp.com
autodiscover.comag.co.uk
autodiscover.gkm.comag.co.uk
autodiscover.hearst.co.uk
autodiscover.natmags.co.uk
mail.comag.co.uk
mail.gkm.comag.co.uk
mail.natmags.co.uk
Other certificates including the domain name hearst.co.uk
(limited to 100 certificates)
dns-vetting1h.map.fastly.net
dns-vetting1g.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
dns-vetting1g.map.fastly.net
*.hearst.co.uk
hearst-uk.map.fastly.net
dns-vetting1g.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
dns-vetting1g.map.fastly.net
dns-vetting1g.map.fastly.net
hearst-uk.map.fastly.net
dns-vetting1h.map.fastly.net
*.hearst.co.uk
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
*.hearst.co.uk
dns-vetting1g.map.fastly.net
dns-vetting1g.map.fastly.net
dns-vetting1g.map.fastly.net
mail.hearst.co.uk
dns-vetting1g.map.fastly.net
dns-vetting1g.map.fastly.net
dns-vetting1g.map.fastly.net
hearst-uk.map.fastly.net
dns-vetting1g.map.fastly.net
dns-vetting1h.map.fastly.net
dns-vetting1h.map.fastly.net
dns-vetting1g.map.fastly.net
dns-vetting1g.map.fastly.net
hearst.co.uk
dns-vetting1g.map.fastly.net
hearst-uk.map.fastly.net
RVZIFEPOOL.resource.hearstcorp.com
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
careers.hearst.co.uk
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
dns-vetting1h.map.fastly.net
hearst-uk.map.fastly.net
dns-vetting1g.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
remotemail.hearst.com
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
philipsbodylove.hearst.co.uk
hearst-uk.map.fastly.net
dns-vetting1g.map.fastly.net
hearst-uk.map.fastly.net
*.hearst.co.uk
careers.hearst.co.uk
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
dns-vetting1g.map.fastly.net
dns-vetting1g.map.fastly.net
careers.hearst.co.uk
hearst-uk.map.fastly.net
dns-vetting1g.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
dns-vetting1g.map.fastly.net
hearst-uk.map.fastly.net
*.hearst.co.uk
dns-vetting1g.map.fastly.net
hearst-uk.map.fastly.net
dns-vetting1g.map.fastly.net
dns-vetting1h.map.fastly.net
*.hearst.co.uk
hearst-uk.map.fastly.net
dns-vetting1h.map.fastly.net
dns-vetting1g.map.fastly.net
hearst-uk.map.fastly.net
dns-vetting1h.map.fastly.net
hearst-uk.map.fastly.net
dns-vetting1h.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
dns-vetting1g.map.fastly.net
hearst-uk.map.fastly.net
dns-vetting1h.map.fastly.net
dns-vetting1g.map.fastly.net
dns-vetting1g.map.fastly.net
dns-vetting1g.map.fastly.net
dns-vetting1g.map.fastly.net
dns-vetting1g.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
dns-vetting1g.map.fastly.net
*.hearst.co.uk
hearst-uk.map.fastly.net
dns-vetting1g.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
dns-vetting1g.map.fastly.net
dns-vetting1g.map.fastly.net
hearst-uk.map.fastly.net
dns-vetting1h.map.fastly.net
*.hearst.co.uk
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
*.hearst.co.uk
dns-vetting1g.map.fastly.net
dns-vetting1g.map.fastly.net
dns-vetting1g.map.fastly.net
mail.hearst.co.uk
dns-vetting1g.map.fastly.net
dns-vetting1g.map.fastly.net
dns-vetting1g.map.fastly.net
hearst-uk.map.fastly.net
dns-vetting1g.map.fastly.net
dns-vetting1h.map.fastly.net
dns-vetting1h.map.fastly.net
dns-vetting1g.map.fastly.net
dns-vetting1g.map.fastly.net
hearst.co.uk
dns-vetting1g.map.fastly.net
hearst-uk.map.fastly.net
RVZIFEPOOL.resource.hearstcorp.com
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
careers.hearst.co.uk
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
dns-vetting1h.map.fastly.net
hearst-uk.map.fastly.net
dns-vetting1g.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
remotemail.hearst.com
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
philipsbodylove.hearst.co.uk
hearst-uk.map.fastly.net
dns-vetting1g.map.fastly.net
hearst-uk.map.fastly.net
*.hearst.co.uk
careers.hearst.co.uk
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
dns-vetting1g.map.fastly.net
dns-vetting1g.map.fastly.net
careers.hearst.co.uk
hearst-uk.map.fastly.net
dns-vetting1g.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
dns-vetting1g.map.fastly.net
hearst-uk.map.fastly.net
*.hearst.co.uk
dns-vetting1g.map.fastly.net
hearst-uk.map.fastly.net
dns-vetting1g.map.fastly.net
dns-vetting1h.map.fastly.net
*.hearst.co.uk
hearst-uk.map.fastly.net
dns-vetting1h.map.fastly.net
dns-vetting1g.map.fastly.net
hearst-uk.map.fastly.net
dns-vetting1h.map.fastly.net
hearst-uk.map.fastly.net
dns-vetting1h.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
dns-vetting1g.map.fastly.net
hearst-uk.map.fastly.net
dns-vetting1h.map.fastly.net
dns-vetting1g.map.fastly.net
dns-vetting1g.map.fastly.net
dns-vetting1g.map.fastly.net
dns-vetting1g.map.fastly.net
Certificate
The complete raw certificate details for mail.hearst.co.uk in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGDTCCBPWgAwIBAgIQT+nlkxUm6+qKCeQBU21fhDANBgkqhkiG9w0BAQUFADBw MQswCQYDVQQGEwJHQjEbMBkGA1UECBMSR3JlYXRlciBNYW5jaGVzdGVyMRAwDgYD VQQHEwdTYWxmb3JkMRowGAYDVQQKExFDT01PRE8gQ0EgTGltaXRlZDEWMBQGA1UE AxMNQ09NT0RPIFNTTCBDQTAeFw0xMzExMTUwMDAwMDBaFw0xNDEyMTYyMzU5NTla MGsxITAfBgNVBAsTGERvbWFpbiBDb250cm9sIFZhbGlkYXRlZDEqMCgGA1UECxMh Q09NT0RPIFNTTCBVbmlmaWVkIENvbW11bmljYXRpb25zMRowGAYDVQQDExFtYWls LmhlYXJzdC5jby51azCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKOP yJTXZPhq6sWjIdP5SMzxbdOfTjNWPs1HwpNj2Q5KYxvFktyX1vDU+XA4s698y76m Hd5fXfJ+h8qZBlvqWfAMWjEF047AOfbEAeozcWGE4A/esjjfHhiqlX7lZ0cEcDDo F1KkzKvnffkZy4LGbIPuw1mcFOSM7fUGjSwLMx204Yn+jtwGEaJS8U2I3xLB7N4i XqLH5jH2QXrKJodr+0bNbOVCsBiW/R9H2Ae81baA2oqLt5uiGwMpFI4XLcw95P8i MUHin9XeZ6hQQ4rZvMQNe2CZ7BSBBD2NX+nv1uH9KbrSpIl/X9S8+aKJqvVf3pks tNiJxH9BgbmOS90klUcCAwEAAaOCAqYwggKiMB8GA1UdIwQYMBaAFBtrvR+KSRiU VDdVtCAX7Te5dxh9MB0GA1UdDgQWBBQURMMchZGFAA6S4eMzCh5/vAQhGzAOBgNV HQ8BAf8EBAMCBaAwDAYDVR0TAQH/BAIwADAdBgNVHSUEFjAUBggrBgEFBQcDAQYI KwYBBQUHAwIwTwYDVR0gBEgwRjA6BgsrBgEEAbIxAQICBzArMCkGCCsGAQUFBwIB Fh1odHRwczovL3NlY3VyZS5jb21vZG8uY29tL0NQUzAIBgZngQwBAgEwOAYDVR0f BDEwLzAtoCugKYYnaHR0cDovL2NybC5jb21vZG9jYS5jb20vQ09NT0RPU1NMQ0Eu Y3JsMGkGCCsGAQUFBwEBBF0wWzAzBggrBgEFBQcwAoYnaHR0cDovL2NydC5jb21v ZG9jYS5jb20vQ09NT0RPU1NMQ0EuY3J0MCQGCCsGAQUFBzABhhhodHRwOi8vb2Nz cC5jb21vZG9jYS5jb20wggErBgNVHREEggEiMIIBHoIRbWFpbC5oZWFyc3QuY28u dWuCClJVS0VYTVRDMDGCIlJVS0VYTVRDMDEucmVzb3VyY2UuaGVhcnN0Y29ycC5j b22CClJVS0VYTVRDMDKCIlJVS0VYTVRDMDIucmVzb3VyY2UuaGVhcnN0Y29ycC5j b22CGGF1dG9kaXNjb3Zlci5jb21hZy5jby51a4IcYXV0b2Rpc2NvdmVyLmdrbS5j b21hZy5jby51a4IZYXV0b2Rpc2NvdmVyLmhlYXJzdC5jby51a4IaYXV0b2Rpc2Nv dmVyLm5hdG1hZ3MuY28udWuCEG1haWwuY29tYWcuY28udWuCFG1haWwuZ2ttLmNv bWFnLmNvLnVrghJtYWlsLm5hdG1hZ3MuY28udWswDQYJKoZIhvcNAQEFBQADggEB AF42avL0R0A1jwHe8qClG8+r5knox5k2jUlbtpx1J1Zlhza5qWXVuiVS85VxCOKL ir/RTK8WUfpnKHm9i/Gv9nE9p7421qWEmNIYZ9agIyo4PQM9wyXiDCoR0jCQmReK p4CDAB0DwLKwu5Pw0ROVZM5cB+MzznwMijU/P1yqHXscVnWTvbVD1yrwEjUyR1D3 /2tIqM3lfBKsyjq7S7mvKBLINIWzEz6a7RxICFC6AGr8KMaPgpIUd+Xjw0h73rTp RWuSpfzjblxiaEgUJXysReVVAS5K3NSx+YDtevevYvP1Awn+Z9Iah/A6LONtqYcO 05knmIyHzCWATVsevgGsYAQ= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4/IlNdk+GrqxaMh0/lI zPFt059OM1Y+zUfCk2PZDkpjG8WS3JfW8NT5cDizr3zLvqYd3l9d8n6HypkGW+pZ 8AxaMQXTjsA59sQB6jNxYYTgD96yON8eGKqVfuVnRwRwMOgXUqTMq+d9+RnLgsZs g+7DWZwU5Izt9QaNLAszHbThif6O3AYRolLxTYjfEsHs3iJeosfmMfZBesomh2v7 Rs1s5UKwGJb9H0fYB7zVtoDaiou3m6IbAykUjhctzD3k/yIxQeKf1d5nqFBDitm8 xA17YJnsFIEEPY1f6e/W4f0putKkiX9f1Lz5oomq9V/emSy02InEf0GBuY5L3SSV RwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 106223473159932333096234995491250462596 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO CA Limited' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO SSL CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-11-15 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-12-16 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO SSL Unified Communications' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mail.hearst.co.uk' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20647746006306130764749371023930148105268114097575552481584584475202911145002986862327291263817246830620321340982066860166851210822482533731473682343078399491531958339631251451028887005713282933545795398183377281535252656738509569691641878479008117670332026468066266736276359470487879993753591939997394237177637298935775414490609084910069286909880605652654854436389275522942032937633836675186709245128366312781616386805592225003905370550814110338303414078388309272033045113535082853626385253725898527437139691703071726288212536844263539195837852225703144786356486370921098844655674020140667961645433450372774538548551 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1b6bbd1f8a491894543755b42017ed37b977187d . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 1444c31c859185000e92e1e3330a1e7fbc04211b . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://secure.comodo.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.comodoca.com/COMODOSSLCA.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (93 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.comodoca.com/COMODOSSLCA.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.comodoca.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (290 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.hearst.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'RUKEXMTC01' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'RUKEXMTC01.resource.hearstcorp.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'RUKEXMTC02' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'RUKEXMTC02.resource.hearstcorp.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.comag.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.gkm.comag.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.hearst.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.natmags.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.comag.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.gkm.comag.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.natmags.co.uk' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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