dev-app.dreader.timeinc.net

- Time Inc. -

Issued by COMODO High-Assurance Secure Server CA

About this certificate

This digital certificate with serial number 4f:03:fb:d1:50:52:92:6f:db:6b:8f:94:c0:15:ff:5e was issued on by COMODO CA Limited.

With 23 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Time Inc.

Organization: Time Inc.
Organization unit: Internet Technology
Organization unit: Hosted by Time Inc.
Organization unit: Unified Communications
Address: 1271 Avenue of the Americas
Postal code: 10020
State / Province: NY
Locality: New York
Country: US

COMODO CA Limited

Organization: COMODO CA Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): 4f:03:fb:d1:50:52:92:6f:db:6b:8f:94:c0:15:ff:5e
Serial Number (int): 105029696025939064724631302088017968990
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: b1:bc:67:68:6c:18:52:22:38:07:92:f0:1c:ac:d8:e5:94:2b:dd:c3
AuthorityKeyId: 3f:d5:b5:d0:d6:44:79:50:4a:17:a3:9b:8c:4a:dc:b8:b0:22:64:6b

Fingerprint (sha1): 3d:8f:4d:b8:6e:69:c1:81:21:41:d7:24:6e:40:72:aa:f6:ff:0c:48
Fingerprint (sha256): 2a:c1:bd:8a:90:f2:94:18:db:92:bd:da:f3:bc:53:cb:4c:11:9b:a0:9d:c8:6d:44:ac:1a:16:3e:0d:a8:d1:ca

Issuing Certificate URL: http://crt.comodoca.com/COMODOHigh-AssuranceSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.comodoca.com
CRL Distribution Point: http://crl.comodoca.com/COMODOHigh-AssuranceSecureServerCA.crl

Check the revocation status for certificate dev-app.dreader.timeinc.net

23

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dev-app.dreader.timeinc.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dev-app.dreader.timeinc.net
dev-app.digitalmagazine.people.com
dev-app.dmagweb.timeinc.net
dev-app.sieverywhere.com
dev-app.sportsillustratedeverywhere.com
dev-app.timeforkidsdigital.com
dev-auth.ew.com
dev-auth.fortune.com
dev-auth.health.com
dev-auth.people.com
dev-auth.realsimple.com
dev-auth.si.com
dev-auth.time.com
dev-auth.timeforkids.com
dev-content.dmagweb.timeinc.net
dev-content.dreader.timeinc.net
dev-origin.dmagweb.timeinc.net
dev-origin.dreader.timeinc.net
dev-preview-allaccess.people.com
dev-preview-allaccess.timeforkidsdigital.com
dev-publish.dmagweb.timeinc.net
dev-publish.dreader.timeinc.net
dev-publish.front9.timeinc.net

Other certificates including the domain name timeinc.net

(limited to 100 certificates)
coredev-i4.timeinc.net
*.allyou.com
app.dreader.timeinc.net
office.timeinc.com
tools.timeinc.net
editor.timeinc.com
www.oxmoorhouse.com
www.timeinclistrental.com
cgi.pathfinder.com
office.timeinc.com
tia.timeinc.net
dev-dcms.www.timeinc.net
prod-dcms.www.timeinc.net
www5.timeinc.net
dev-wpcom.timeinc.net
app.dreader.timeinc.net
www.meredith.com
qa-tips-1.timeinc.net
content-api.timeinc.net
dev-wpcom.timeinc.net
cgi.timeinc.net
tmpldev-tips-1.timeinc.net
myrecipes-mobile.timeinc.net
tools.timeinc.net
www.reference.dcms-sa.timeinc.net
qa-profiles-uat.timeinc.net
qa-profiles.timeinc.net
www.reference.dcms-sa.timeinc.net
tmpcaa.enterprise.corpad.timeinc.com
csp-endpoint.timeinc.net
profiles.timeinc.net
dev-profiles.timeinc.net
timeinc.net
csp-endpoint.timeinc.net
www.timeinclistrental.com
staging.timeinc.net
rails.timeinc.net
prod-dcms.www.timeinc.net
www.reference.dcms-sa.timeinc.net
timeinc.net
office.timeinc.com
www.oxmoorhouse.com
prod-dcms.www.timeinc.net
dev-subs.timeinc.net
npd.timeinc.net
www.timeinclistrental.com
prod-dcms.www.timeinc.net
www.meredith.com
dev-dcms.www.timeinc.net
tia.timeinc.net
editor.timeinc.com
qa-profiles.timeinc.net
applenews.meredithcorp.io
www.timeinclistrental.com
www.oxmoorhouse.com
*.shinken.eces.timeinc.net
editor.timeinc.com
qa-ucs.timeinc.net
railsdeployprod.timeinc.net
omns.timeinc.net
content-api.timeinc.net
dev-ucs.timeinc.net
www.oxmoorhouse.com
*.allyou.com
adops-static.timeinc.net
i4.timeinc.net
www.reference.dcms-sa.timeinc.net
www.oxmoorhouse.com
applenews.meredithcorp.io
cp.timeinc.net
dev-app.dreader.timeinc.net
rails.timeinc.net
*.dcms-test.timeinc.net
rails.timeinc.net
editor.timeinc.com
amp.timeinc.net
*.timeinc.net
railsadmin.timeinc.net
*.timeinc.net
fb.ipsoft.timeinc.net
www.timeinclistrental.com
content-api.timeinc.net
office.timeinc.com
spare-tips-4.timeinc.net
dev-app.dreader.timeinc.net
ucs.timeinc.net
tia.timeinc.net
www.timeinclistrental.com
test-editor.dcms-ioe.timeinc.net
tips-1.timeinc.net
cmdb.timeinc.net
amp.timeinc.net
www.timeinc.net
cp.timeinc.net
editor.timeinc.com
www.oxmoorhouse.com
www.timeinclistrental.com
shinken.timeinc.net
railsdeploy.timeinc.net
i2.timeinc.net

Certificate

The complete raw certificate details for dev-app.dreader.timeinc.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstscZoM5C35aEgvvpnO/
hf6Spr7JFnlbnG3rocfKYDa5s464QnREWwEbsre4PAGNefozbpcWzbEuWN47iskn
bszIScXJSuCVW6GPG6jYG2/tAZj3tcTGOUhjQROo5oNLEucaLlGYPqrtEIja6Q//
cCYg2Y1qx2ilotPomoKZLYjrhAaic4jpwp79TPpMQ18dupxpB7we9AzkRNO4yDaV
yFqnAEkmxIhDwGeEeB9QHOOa6zfACQ+qMsm8wlDthsbF4Av+G2IYOrEAUyaQ/7wT
0eSJjLCj8bMiCsKuFK/cDQCgog6iQkP4N366pIqq1x4ybGbv/I3wW5qfbmNMibUT
hwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 105029696025939064724631302088017968990
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO CA Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO High-Assurance Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-04-21 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-03-25 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '10020'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NY'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '1271 Avenue of the Americas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Time Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet Technology'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hosted by Time Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Unified Communications'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dev-app.dreader.timeinc.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22578465915077177798969581363251596072505700120040313616371003468592528613701940866137206744091464730291206814619360715723198161117381784960399950060432813719856140470884635517527120477851094091234842162055275353244493106554860256599961588532729102044057781623975205466488956210442274232225682533431174321487701746824797528509190961315935327310121739929695672017343573846112416717673369949101079782287145481980288182599948953103032330082889373607518182656794162058327264410055469531405892628780269392296661496330111131076186483881476313826214924933045904825517628849706032324873504622951248004295596091098731432448903
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 3fd5b5d0d64479504a17a39b8c4adcb8b022646b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b1bc67686c185222380792f01cacd8e5942bddc3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://secure.comodo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.comodoca.com/COMODOHigh-AssuranceSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (116 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.comodoca.com/COMODOHigh-AssuranceSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.comodoca.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (673 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-app.dreader.timeinc.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-app.digitalmagazine.people.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-app.dmagweb.timeinc.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-app.sieverywhere.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-app.sportsillustratedeverywhere.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-app.timeforkidsdigital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-auth.ew.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-auth.fortune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-auth.health.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-auth.people.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-auth.realsimple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-auth.si.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-auth.time.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-auth.timeforkids.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-content.dmagweb.timeinc.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-content.dreader.timeinc.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-origin.dmagweb.timeinc.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-origin.dreader.timeinc.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-preview-allaccess.people.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-preview-allaccess.timeforkidsdigital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-publish.dmagweb.timeinc.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-publish.dreader.timeinc.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-publish.front9.timeinc.net'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		008f475c848189448a9bf81cd5ec15cd0494a325224d4771ccbcffa0f7499f3ef1e1864ac5f5246280b3e94b9df30aca5cebc2fb82bbf9124ad37c7cdd0b7672e26e32d245799892bd2aa5067805830b7585228022f6333c0ac8a3f5d2b9f25bed236e518f535d038983ea6d15309995737e241c776114d0c64e865a8c6ed977b6c5733c9f1896cf870ebb521247b0e02434b506cc7315b3e2c132ac52b967230d32849462a89b7e55213442982c7a9374a9f669943e1194bdfc4cdf2c50305b3555dfcd316e6052119c44c584642ba20f43c1a353793f420c88eee25e808a96d56cf1cfada17e23ecfa5ce5ec3d4a55c0dd3608e77d0b2e69e527479ffc3f87f7