*.app-west.buzzfeed.io
Issued by Amazon RSA 2048 M02
About this certificate
This digital certificate with serial number 0f:de:a5:2e:1b:e8:87:af:e5:ee:3b:0f:e8:7b:58:e9 was issued on by Amazon.
With 13 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=*.app-west.buzzfeed.io
Amazon
Organization:
Amazon
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 0f:de:a5:2e:1b:e8:87:af:e5:ee:3b:0f:e8:7b:58:e9Serial Number (int): 21094460090085754828420912832805820649
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 6d:06:e4:05:3a:e8:fa:d7:67:51:72:b3:54:6a:0c:e4:b7:9f:41:87
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2
Fingerprint (sha1): 45:e9:31:cc:8c:44:a2:f5:4d:97:84:50:9d:c9:3c:ca:2a:5b:1c:61
Fingerprint (sha256): 2c:d7:19:99:1e:6f:ab:65:a0:df:a3:1d:06:cc:e3:4f:64:26:b4:5e:cf:9b:d2:99:19:e0:bb:58:69:aa:f7:b2
Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer
Revocation information
OCSP Server: http://ocsp.r2m02.amazontrust.comCRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl
Check the revocation status for certificate *.app-west.buzzfeed.io
13
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.app-west.buzzfeed.io
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.app-west.buzzfeed.io
app-west.buzzfeed.io
*.sso.app-west.buzzfeed.io
*.use1.huffpo.net
*.huffpost.net
*.cambria-production.huffpo.net
*.cambria-staging.huffpo.net
*.buzzfeed.com
*.buzzfeed.io
glb.buzzfeed.io
*.tools.huffpost.net
*.huffingtonpost.com
bzfd.it
app-west.buzzfeed.io
*.sso.app-west.buzzfeed.io
*.use1.huffpo.net
*.huffpost.net
*.cambria-production.huffpo.net
*.cambria-staging.huffpo.net
*.buzzfeed.com
*.buzzfeed.io
glb.buzzfeed.io
*.tools.huffpost.net
*.huffingtonpost.com
bzfd.it
Other certificates including the domain name buzzfeed.io
(limited to 100 certificates)
*.namespace--danmeruelo.unstable.buzzfeed.io
*.app-west.buzzfeed.io
*.buzzfeed.com
*.app-west.buzzfeed.io
*.dev.buzzfeed.io
*.namespace--danmeruelo.unstable.buzzfeed.io
*.namespace--danmeruelo.unstable.buzzfeed.io
*.namespace--danmeruelo02.unstable.buzzfeed.io
*.namespace--danmeruelo.unstable.buzzfeed.io
*.namespace--danmeruelo.unstable.buzzfeed.io
*.adminprod.buzzfeed.io
*.dev.buzzfeed.io
*.adminprod.buzzfeed.io
*.namespace--danmeruelo.unstable.buzzfeed.io
*.prod.buzzfeed.io
*.namespace--danmeruelo.unstable.buzzfeed.io
*.prod.buzzfeed.io
*.app-west.buzzfeed.io
*.namespace--danmeruelo.unstable.buzzfeed.io
*.prod.buzzfeed.io
*.unstable.buzzfeed.io
*.prod.buzzfeed.io
*.prod.buzzfeed.io
*.unstable.buzzfeed.io
*.app-west.buzzfeed.io
*.app-west.buzzfeed.io
*.namespace--willmccutchen.unstable.buzzfeed.io
*.namespace--danmeruelo.unstable.buzzfeed.io
*.unstable.buzzfeed.io
*.stage.buzzfeed.io
*.unstable.buzzfeed.io
*.namespace--danmeruelo.unstable.buzzfeed.io
*.prod.buzzfeed.io
*.stage.buzzfeed.io
*.app-west.buzzfeed.io
*.namespace--danmeruelo.unstable.buzzfeed.io
*.dev.buzzfeed.io
*.test.buzzfeed.io
*.app-west.buzzfeed.io
*.namespace--danmeruelo.unstable.buzzfeed.io
*.namespace--danmeruelo.unstable.buzzfeed.io
*.prod.buzzfeed.io
*.namespace--danmeruelo.unstable.buzzfeed.io
*.hackweek.buzzfeed.io
*.namespace--danmeruelo.unstable.buzzfeed.io
*.stage.buzzfeed.io
*.stage.buzzfeed.io
*.stage.buzzfeed.io
*.namespace--danmeruelo.unstable.buzzfeed.io
*.app-west.buzzfeed.io
*.prod.buzzfeed.io
*.stage.buzzfeed.io
*.namespace--danmeruelo.unstable.buzzfeed.io
*.app-west.buzzfeed.io
*.app-west.buzzfeed.io
*.prod.buzzfeed.io
*.unstable.buzzfeed.io
*.namespace--danmeruelo.unstable.buzzfeed.io
*.dev.buzzfeed.io
*.app-west.buzzfeed.io
*.dev.buzzfeed.io
*.prod.buzzfeed.io
*.namespace--danmeruelo.unstable.buzzfeed.io
*.app-west.buzzfeed.io
*.app-west.buzzfeed.io
*.namespace--raymond.unstable.buzzfeed.io
*.namespace--danmeruelo.unstable.buzzfeed.io
*.namespace--danmeruelo.unstable.buzzfeed.io
*.stage.buzzfeed.io
*.namespace--danmeruelo.unstable.buzzfeed.io
*.app-west.buzzfeed.io
*.namespace--danmeruelo.unstable.buzzfeed.io
*.unstable.buzzfeed.io
*.namespace--raymond.unstable.buzzfeed.io
*.namespace--danmeruelo.unstable.buzzfeed.io
*.namespace--danmeruelo.unstable.buzzfeed.io
*.namespace--dan-meruelo.unstable.buzzfeed.io
*.namespace--raymond.unstable.buzzfeed.io
*.prod.buzzfeed.io
*.app-west.buzzfeed.io
*.namespace--danmeruelo.unstable.buzzfeed.io
*.test.buzzfeed.io
*.unstable.buzzfeed.io
*.rigplayground1.buzzfeed.io
*.app-west.buzzfeed.io
*.namespace--danmeruelo.unstable.buzzfeed.io
*.prod.buzzfeed.io
*.stage.buzzfeed.io
*.stage.buzzfeed.io
*.dev.buzzfeed.io
*.namespace--danmeruelo.unstable.buzzfeed.io
*.buzzfeed.com
*.app-west.buzzfeed.io
*.namespace--danmeruelo.unstable.buzzfeed.io
*.namespace--danmeruelo.unstable.buzzfeed.io
*.prod.buzzfeed.io
*.adminprod.buzzfeed.io
*.hackweek.buzzfeed.io
*.prod.buzzfeed.io
*.namespace.unstable.buzzfeed.io
*.app-west.buzzfeed.io
*.buzzfeed.com
*.app-west.buzzfeed.io
*.dev.buzzfeed.io
*.namespace--danmeruelo.unstable.buzzfeed.io
*.namespace--danmeruelo.unstable.buzzfeed.io
*.namespace--danmeruelo02.unstable.buzzfeed.io
*.namespace--danmeruelo.unstable.buzzfeed.io
*.namespace--danmeruelo.unstable.buzzfeed.io
*.adminprod.buzzfeed.io
*.dev.buzzfeed.io
*.adminprod.buzzfeed.io
*.namespace--danmeruelo.unstable.buzzfeed.io
*.prod.buzzfeed.io
*.namespace--danmeruelo.unstable.buzzfeed.io
*.prod.buzzfeed.io
*.app-west.buzzfeed.io
*.namespace--danmeruelo.unstable.buzzfeed.io
*.prod.buzzfeed.io
*.unstable.buzzfeed.io
*.prod.buzzfeed.io
*.prod.buzzfeed.io
*.unstable.buzzfeed.io
*.app-west.buzzfeed.io
*.app-west.buzzfeed.io
*.namespace--willmccutchen.unstable.buzzfeed.io
*.namespace--danmeruelo.unstable.buzzfeed.io
*.unstable.buzzfeed.io
*.stage.buzzfeed.io
*.unstable.buzzfeed.io
*.namespace--danmeruelo.unstable.buzzfeed.io
*.prod.buzzfeed.io
*.stage.buzzfeed.io
*.app-west.buzzfeed.io
*.namespace--danmeruelo.unstable.buzzfeed.io
*.dev.buzzfeed.io
*.test.buzzfeed.io
*.app-west.buzzfeed.io
*.namespace--danmeruelo.unstable.buzzfeed.io
*.namespace--danmeruelo.unstable.buzzfeed.io
*.prod.buzzfeed.io
*.namespace--danmeruelo.unstable.buzzfeed.io
*.hackweek.buzzfeed.io
*.namespace--danmeruelo.unstable.buzzfeed.io
*.stage.buzzfeed.io
*.stage.buzzfeed.io
*.stage.buzzfeed.io
*.namespace--danmeruelo.unstable.buzzfeed.io
*.app-west.buzzfeed.io
*.prod.buzzfeed.io
*.stage.buzzfeed.io
*.namespace--danmeruelo.unstable.buzzfeed.io
*.app-west.buzzfeed.io
*.app-west.buzzfeed.io
*.prod.buzzfeed.io
*.unstable.buzzfeed.io
*.namespace--danmeruelo.unstable.buzzfeed.io
*.dev.buzzfeed.io
*.app-west.buzzfeed.io
*.dev.buzzfeed.io
*.prod.buzzfeed.io
*.namespace--danmeruelo.unstable.buzzfeed.io
*.app-west.buzzfeed.io
*.app-west.buzzfeed.io
*.namespace--raymond.unstable.buzzfeed.io
*.namespace--danmeruelo.unstable.buzzfeed.io
*.namespace--danmeruelo.unstable.buzzfeed.io
*.stage.buzzfeed.io
*.namespace--danmeruelo.unstable.buzzfeed.io
*.app-west.buzzfeed.io
*.namespace--danmeruelo.unstable.buzzfeed.io
*.unstable.buzzfeed.io
*.namespace--raymond.unstable.buzzfeed.io
*.namespace--danmeruelo.unstable.buzzfeed.io
*.namespace--danmeruelo.unstable.buzzfeed.io
*.namespace--dan-meruelo.unstable.buzzfeed.io
*.namespace--raymond.unstable.buzzfeed.io
*.prod.buzzfeed.io
*.app-west.buzzfeed.io
*.namespace--danmeruelo.unstable.buzzfeed.io
*.test.buzzfeed.io
*.unstable.buzzfeed.io
*.rigplayground1.buzzfeed.io
*.app-west.buzzfeed.io
*.namespace--danmeruelo.unstable.buzzfeed.io
*.prod.buzzfeed.io
*.stage.buzzfeed.io
*.stage.buzzfeed.io
*.dev.buzzfeed.io
*.namespace--danmeruelo.unstable.buzzfeed.io
*.buzzfeed.com
*.app-west.buzzfeed.io
*.namespace--danmeruelo.unstable.buzzfeed.io
*.namespace--danmeruelo.unstable.buzzfeed.io
*.prod.buzzfeed.io
*.adminprod.buzzfeed.io
*.hackweek.buzzfeed.io
*.prod.buzzfeed.io
*.namespace.unstable.buzzfeed.io
Certificate
The complete raw certificate details for *.app-west.buzzfeed.io in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFajCCBFKgAwIBAgIQD96lLhvoh6/l7jsP6HtY6TANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAyMB4XDTIzMDYxMjAwMDAwMFoXDTI0MDcxMDIzNTk1OVowITEf MB0GA1UEAwwWKi5hcHAtd2VzdC5idXp6ZmVlZC5pbzCCASIwDQYJKoZIhvcNAQEB BQADggEPADCCAQoCggEBAMW63rSiAFwvnOKjjT7TuU69IEIlWnfAjSzpbGX59C14 m/VtN7lMh9tTO1us3xp6Bp/0DD/K90VB3bLpoR6YmW+RHLr+t4RdAmTT7Wo94mdX 6JNlFH12326HudrqiiHkdQfmH1MTK1vPmrDOI97OGQQaAo9rT5ouDSAuleCelxZJ BX5jGrrkaFw8ySeq+cPeAe4w80ILIjnbhfQHXNbgL+mSmBzubjqpsZv9mO4QIiy0 yS2dLwA6eeVR2E/NDz72opCMO9rkwqIfyeL/p1GZ9/x0PyeP/pglvQReoHHkR9al GGxgufssS6/kUIUQSXeimwiUXI8fSyR+dkmYsSPD8b8CAwEAAaOCAoEwggJ9MB8G A1UdIwQYMBaAFMAxUs1aUMOCfHRxzsvpnPl664LiMB0GA1UdDgQWBBRtBuQFOuj6 12dRcrNUagzkt59BhzCCAR4GA1UdEQSCARUwggERghYqLmFwcC13ZXN0LmJ1enpm ZWVkLmlvghRhcHAtd2VzdC5idXp6ZmVlZC5pb4IaKi5zc28uYXBwLXdlc3QuYnV6 emZlZWQuaW+CESoudXNlMS5odWZmcG8ubmV0gg4qLmh1ZmZwb3N0Lm5ldIIfKi5j YW1icmlhLXByb2R1Y3Rpb24uaHVmZnBvLm5ldIIcKi5jYW1icmlhLXN0YWdpbmcu aHVmZnBvLm5ldIIOKi5idXp6ZmVlZC5jb22CDSouYnV6emZlZWQuaW+CD2dsYi5i dXp6ZmVlZC5pb4IUKi50b29scy5odWZmcG9zdC5uZXSCFCouaHVmZmluZ3RvbnBv c3QuY29tggdiemZkLml0MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEF BQcDAQYIKwYBBQUHAwIwOwYDVR0fBDQwMjAwoC6gLIYqaHR0cDovL2NybC5yMm0w Mi5hbWF6b250cnVzdC5jb20vcjJtMDIuY3JsMBMGA1UdIAQMMAowCAYGZ4EMAQIB MHUGCCsGAQUFBwEBBGkwZzAtBggrBgEFBQcwAYYhaHR0cDovL29jc3AucjJtMDIu YW1hem9udHJ1c3QuY29tMDYGCCsGAQUFBzAChipodHRwOi8vY3J0LnIybTAyLmFt YXpvbnRydXN0LmNvbS9yMm0wMi5jZXIwDAYDVR0TAQH/BAIwADATBgorBgEEAdZ5 AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVCY8Ianu8tHUMq5IVRf3qjyb TjgTWfK8heoTsP0JEtLBH+JhCk6pcc6uqoiS4d9tGc1Y08UipOf3kHvQ1uqwciCF Z35rGwDJSuUthJ1P2ePvnp5HCnakKWZ+gr/XyMZexHyPNxD4GmCpUg/fAOOrSRR8 jN5o00NlwSQj0PMI0e1eu8z6WwYjyTECOQpaZ8t9GayrHBkS+oqvVtwqpIdTbdo8 v5ECzGH575BgnPE519LeHdrFMpT0OALg1Scy90VzMBRaWlKv0Dcbof19LXlTTMSN XtPMSosBdKBRGnhxszTPHFGfJbKClx8uDx+Tz8GOjxn8kkyGhQqD3cUf2nyzDg== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxbretKIAXC+c4qONPtO5 Tr0gQiVad8CNLOlsZfn0LXib9W03uUyH21M7W6zfGnoGn/QMP8r3RUHdsumhHpiZ b5Ecuv63hF0CZNPtaj3iZ1fok2UUfXbfboe52uqKIeR1B+YfUxMrW8+asM4j3s4Z BBoCj2tPmi4NIC6V4J6XFkkFfmMauuRoXDzJJ6r5w94B7jDzQgsiOduF9Adc1uAv 6ZKYHO5uOqmxm/2Y7hAiLLTJLZ0vADp55VHYT80PPvaikIw72uTCoh/J4v+nUZn3 /HQ/J4/+mCW9BF6gceRH1qUYbGC5+yxLr+RQhRBJd6KbCJRcjx9LJH52SZixI8Px vwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 21094460090085754828420912832805820649 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-12 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-10 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.app-west.buzzfeed.io' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24961095082011190726217618860579939173805991783182602704946311359118190746176048722048356840329491466011531096943055816907267183715751718554079999513607751944196507297029044906079951118609087176054917555881447954938613668747359591179920724090204826212548446569299659962544304770607259054729921018407474727290078000619420536674905753606218181254018842196112850664470414430256486688553199026080719710036085540994281370814086155266068113565001167745626959092769825262612136788661537593707521363367427071863905606739690490817144702528816916308329878952250333525101544834869206320233032521056412658484175995961699790483903 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 6d06e4053ae8fad7675172b3546a0ce4b79f4187 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (277 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.app-west.buzzfeed.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app-west.buzzfeed.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sso.app-west.buzzfeed.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.use1.huffpo.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.huffpost.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cambria-production.huffpo.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cambria-staging.huffpo.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.buzzfeed.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.buzzfeed.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glb.buzzfeed.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tools.huffpost.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.huffingtonpost.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bzfd.it' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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