hearst.co.uk

Issued by GlobalSign Atlas R3 DV TLS CA 2022 Q1

About this certificate

This digital certificate with serial number 01:22:77:bc:7e:ed:1c:a2:bd:64:2a:8a:15:a1:25:d3 was issued on by GlobalSign nv-sa.

With 122 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=hearst.co.uk

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 01:22:77:bc:7e:ed:1c:a2:bd:64:2a:8a:15:a1:25:d3
Serial Number (int): 1508194629894249127769046852776830419
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: cf:2f:6d:2c:58:58:6d:c1:f3:0c:19:14:2c:a0:12:7c:96:4c:e4:1d
AuthorityKeyId: 9c:2a:67:d0:b4:83:31:5b:80:cb:29:96:55:75:09:37:38:b8:3c:a5

Fingerprint (sha1): 58:82:79:53:75:06:6c:bd:93:2b:34:3b:d9:b5:a7:0f:79:7b:20:4c
Fingerprint (sha256): 21:22:cf:61:f4:19:1a:53:cc:b8:72:70:e2:b1:0b:48:d7:42:c0:dd:52:d0:87:fe:0c:94:e0:d1:39:8f:95:ea

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2022q1.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q1
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2022q1.crl

Check the revocation status for certificate hearst.co.uk

122

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for hearst.co.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

hearst.co.uk
*.asdagoodliving.co.uk
*.bazaarartweek.co.uk
*.bazaaratwork.co.uk
*.bazaarsummit.co.uk
*.bicycling.nl
*.blogs.elle.es
*.caranddriver.es
*.cdnds.net
*.cosmopolitan.co.uk
*.cosmopolitan.it
*.countryliving.co.uk
*.countrylivingshop.co.uk
*.crecerfeliz.es
*.delish.co.uk
*.diezminutos.es
*.digitalspy.co.uk
*.digitalspy.com
*.elle.co.jp
*.elle.it
*.ellebeautyawards.it
*.elledecor.it
*.elledecoration.co.uk
*.elleuk.com
*.esquire.co.uk
*.financiallyfabulous.co.uk
*.fotogramas.es
*.gioia.it
*.goodhousekeeping.co.uk
*.harpersbazaar.co.uk
*.harpersbazaar.jp
*.hdigital.net
*.hearst.co.uk
*.hearst.it
*.hearstcontentagency.co.uk
*.hearstcontentagency.com
*.hearstgames.com
*.hearstgames.net
*.hearstglobalsolutions.com
*.hearstmagazinesdirect.co.uk
*.housebeautiful.co.uk
*.jan-magazine.nl
*.marieclaire.it
*.menshealth.co.uk
*.menshealth.es
*.menshealth.nl
*.micasarevista.com
*.netdoctor.co.uk
*.prima.co.uk
*.princess.hdigital.net
*.princessjourney.co.uk
*.quemedices.es
*.quest.nl
*.quotenet.nl
*.redonline.co.uk
*.runnersweb.nl
*.runnersworld.co.uk
*.salonqp.com
*.townandcountrymag.co.uk
*.womenshealth.es
*.womenshealthlive.co.uk
*.womenshealthmag.co.uk
*.womenshealthmag.nl
asdagoodliving.co.uk
bazaarartweek.co.uk
bazaaratwork.co.uk
bazaarsummit.co.uk
bicycling.nl
blogs.elle.es
caranddriver.es
cosmopolitan.it
countryliving.co.uk
countrylivingshop.co.uk
crecerfeliz.es
delish.co.uk
diezminutos.es
digitalspy.co.uk
digitalspy.com
elle.co.jp
elle.it
ellebeautyawards.it
elledecor.it
elledecoration.co.uk
elleuk.com
esquire.co.uk
financiallyfabulous.co.uk
fotogramas.es
gioia.it
goodhousekeeping.co.uk
harpersbazaar.co.uk
harpersbazaar.jp
hearst.it
hearstcontentagency.co.uk
hearstcontentagency.com
hearstglobal.com
hearstglobalsolutions.com
hearstmagazinesdirect.co.uk
housebeautiful.co.uk
insidesoap.co.uk
jan-magazine.nl
marieclaire.it
menshealth.co.uk
menshealth.es
menshealth.nl
micasarevista.com
netdoctor.co.uk
prima.co.uk
princessjourney.co.uk
quemedices.es
quest.nl
quotenet.nl
redonline.co.uk
runnersweb.nl
runnersworld.co.uk
salonqp.com
townandcountrymag.co.uk
womenshealth.es
womenshealthlive.co.uk
womenshealthmag.co.uk
womenshealthmag.nl
*.hearst.es
hearst.es

Other certificates including the domain name hearst.co.uk

(limited to 100 certificates)
dns-vetting1h.map.fastly.net
dns-vetting1g.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
dns-vetting1g.map.fastly.net
*.hearst.co.uk
hearst-uk.map.fastly.net
dns-vetting1g.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
dns-vetting1g.map.fastly.net
dns-vetting1g.map.fastly.net
hearst-uk.map.fastly.net
dns-vetting1h.map.fastly.net
*.hearst.co.uk
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
*.hearst.co.uk
dns-vetting1g.map.fastly.net
dns-vetting1g.map.fastly.net
dns-vetting1g.map.fastly.net
mail.hearst.co.uk
dns-vetting1g.map.fastly.net
dns-vetting1g.map.fastly.net
dns-vetting1g.map.fastly.net
hearst-uk.map.fastly.net
dns-vetting1g.map.fastly.net
dns-vetting1h.map.fastly.net
dns-vetting1h.map.fastly.net
dns-vetting1g.map.fastly.net
dns-vetting1g.map.fastly.net
hearst.co.uk
dns-vetting1g.map.fastly.net
hearst-uk.map.fastly.net
RVZIFEPOOL.resource.hearstcorp.com
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
careers.hearst.co.uk
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
dns-vetting1h.map.fastly.net
hearst-uk.map.fastly.net
dns-vetting1g.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
remotemail.hearst.com
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
philipsbodylove.hearst.co.uk
hearst-uk.map.fastly.net
dns-vetting1g.map.fastly.net
hearst-uk.map.fastly.net
*.hearst.co.uk
careers.hearst.co.uk
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
dns-vetting1g.map.fastly.net
dns-vetting1g.map.fastly.net
careers.hearst.co.uk
hearst-uk.map.fastly.net
dns-vetting1g.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
dns-vetting1g.map.fastly.net
hearst-uk.map.fastly.net
*.hearst.co.uk
dns-vetting1g.map.fastly.net
hearst-uk.map.fastly.net
dns-vetting1g.map.fastly.net
dns-vetting1h.map.fastly.net
*.hearst.co.uk
hearst-uk.map.fastly.net
dns-vetting1h.map.fastly.net
dns-vetting1g.map.fastly.net
hearst-uk.map.fastly.net
dns-vetting1h.map.fastly.net
hearst-uk.map.fastly.net
dns-vetting1h.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
dns-vetting1g.map.fastly.net
hearst-uk.map.fastly.net
dns-vetting1h.map.fastly.net
dns-vetting1g.map.fastly.net
dns-vetting1g.map.fastly.net
dns-vetting1g.map.fastly.net
dns-vetting1g.map.fastly.net

Certificate

The complete raw certificate details for hearst.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0uKg/ZjnkspTylta7pQ9
vCP9orNzwhdN7B/5IG8VwsGMt53Vnd0gBnDlbRCKqdLWZKhHc1nMNyvb/Mm0r5kq
TkUT3h+FSVfQxSQlT6MLRSU8iYUEZ1qZFfJkhzZ38EbINIvda8TVRQyS8rXnwiW4
/1qZALCDn7vn+wzywOtjQth7JWSmHB7xy2bqRfUx6dyBdFzyEAvCG0w/BRkO1jhY
+2TKKsJwT0VqbWwoDEvMQvVUtKf3ZcdW506/Zs8BJo6iAJKwEY22MEQYUhsdkog5
1ST7MgGyg0b3mCHQkLq7cqerUl7RvorVszTwKdjOiOVBfJQRn3UJMwK1isp7l9ey
pwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1508194629894249127769046852776830419
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2022 Q1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-01-25 18:35:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-26 18:35:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'hearst.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26621798903626585770683596982062918285269429547770804123085901671891721252428337221480237912979229176896040500367555485663779197168763232565998402197476151470385698162452896209096487004107303090002421341564277469760506819715657483689994941093875509530465422285797617885382599376624196210761018475974453211220516138207974013445929697432286903835889087626853572089026975710830790573040313420679670917819098358276210009202676685601229718918452817524385692357720484340761958220616723430260536357579859538897336936698110606422564687512748518580506510732968438121200018429541721648709860669606958310850338724735086860153511
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2314 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hearst.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.asdagoodliving.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bazaarartweek.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bazaaratwork.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bazaarsummit.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bicycling.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blogs.elle.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.caranddriver.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cdnds.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cosmopolitan.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cosmopolitan.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.countryliving.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.countrylivingshop.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.crecerfeliz.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.delish.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.diezminutos.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.digitalspy.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.digitalspy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elle.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elle.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ellebeautyawards.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elledecor.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elledecoration.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elleuk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.esquire.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.financiallyfabulous.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fotogramas.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gioia.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.goodhousekeeping.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.harpersbazaar.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.harpersbazaar.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hdigital.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hearst.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hearst.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hearstcontentagency.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hearstcontentagency.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hearstgames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hearstgames.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hearstglobalsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hearstmagazinesdirect.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.housebeautiful.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jan-magazine.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.marieclaire.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.menshealth.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.menshealth.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.menshealth.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.micasarevista.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.netdoctor.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prima.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.princess.hdigital.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.princessjourney.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.quemedices.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.quest.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.quotenet.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.redonline.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.runnersweb.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.runnersworld.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.salonqp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.townandcountrymag.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.womenshealth.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.womenshealthlive.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.womenshealthmag.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.womenshealthmag.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asdagoodliving.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bazaarartweek.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bazaaratwork.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bazaarsummit.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bicycling.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blogs.elle.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caranddriver.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cosmopolitan.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'countryliving.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'countrylivingshop.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crecerfeliz.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delish.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diezminutos.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalspy.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalspy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elle.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elle.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ellebeautyawards.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elledecor.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elledecoration.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elleuk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esquire.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'financiallyfabulous.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fotogramas.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gioia.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goodhousekeeping.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harpersbazaar.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harpersbazaar.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hearst.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hearstcontentagency.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hearstcontentagency.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hearstglobal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hearstglobalsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hearstmagazinesdirect.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'housebeautiful.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insidesoap.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jan-magazine.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marieclaire.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'menshealth.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'menshealth.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'menshealth.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'micasarevista.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netdoctor.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prima.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'princessjourney.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quemedices.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quest.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quotenet.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redonline.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'runnersweb.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'runnersworld.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salonqp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'townandcountrymag.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'womenshealth.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'womenshealthlive.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'womenshealthmag.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'womenshealthmag.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hearst.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hearst.es'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cf2f6d2c58586dc1f30c19142ca0127c964ce41d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q1'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2022q1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9c2a67d0b483315b80cb29965575093738b83ca5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2022q1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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