origin-www.fitpregnancy.com

- Meredith Operations Corporation -

Issued by Sectigo RSA Organization Validation Secure Server CA

About this certificate

This digital certificate with serial number 7f:4c:f8:67:58:f5:da:97:54:94:aa:cc:df:34:c0:90 was issued on by Sectigo Limited.

With 24 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Meredith Operations Corporation

Organization: Meredith Operations Corporation
State / Province: Iowa
Country: US

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate will expire on

Certificate Details

Serial Number (hex): 7f:4c:f8:67:58:f5:da:97:54:94:aa:cc:df:34:c0:90
Serial Number (int): 169211608251547307299573980330986881168
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: f8:02:e8:dd:82:09:e1:20:38:39:a8:2c:7b:75:07:b2:18:44:05:04
AuthorityKeyId: 17:d9:d6:25:27:67:f9:31:c2:49:43:d9:30:36:44:8c:6c:a9:4f:eb

Fingerprint (sha1): f3:44:a7:46:d2:05:c6:52:c8:a3:0f:e6:3b:bc:e5:6f:11:e7:06:41
Fingerprint (sha256): 3f:53:9a:ed:f0:83:dd:ab:5f:8d:2d:c9:fc:43:f6:c0:18:e0:a9:2c:fe:66:69:da:94:cf:b8:90:c8:61:2c:1c

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com
CRL Distribution Point: http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl

Check the revocation status for certificate origin-www.fitpregnancy.com

24

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for origin-www.fitpregnancy.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

origin-www.fitpregnancy.com
fitnessmagazine.com
fitpregnancy.com
images.midwestliving.mdpcdn.com
images.more.mdpcdn.com
images.parenting.mdpcdn.com
images.parents.mdpcdn.com
images.shape.mdpcdn.com
midwestliving.com
origin-fitnessmagazine.mdpcdn.com
origin-fitpregnancy.mdpcdn.com
origin-midwestliving.mdpcdn.com
origin-parenting.mdpcdn.com
origin-parents.mdpcdn.com
origin-shape.mdpcdn.com
origin-www.fitnessmagazine.com
origin-www.midwestliving.com
origin-www.parenting.com
origin-www.parents.com
origin-www.shape.com
parenting.com
parents.com
shape.com
www.parents.com

Other certificates including the domain name fitpregnancy.com

(limited to 100 certificates)
qa4.ugc.marthastewart.com
*.secure.meredith.com
secure.meredith.com
my.meredith.com
qa4.ugc.marthastewart.com
fitpregnancy.com
*.agriculture.com
dev.fitpregnancy.com
dev.secure.meredith.com
secure.meredith.com
dev.fitpregnancy.com
mywedding.com
secure.meredith.com
mywedding.com
login.fitpregnancy.com
qa2.ugc.marthastewart.com
mdp.api.meredith.com
secure.meredith.com
fitpregnancy.com
admin.web.fitpregnancy.com
qa4.ugc.marthastewart.com
ugc.marthastewart.com
secure.meredith.com

dev.fitpregnancy.com
secure.meredith.com
qa3.ugc.marthastewart.com
ugc.marthastewart.com
test.secure.meredith.com
www.fitpregnancy.com
qa3.ugc.marthastewart.com
ugc.marthastewart.com
secure.meredith.com
*.secure.meredith.com
origin-dev.fitpregnancy.com
secure.meredith.com
fitpregnancy.com
qa3.ugc.marthastewart.com
origin-www.fitpregnancy.com
api.meredith.com
ugc.marthastewart.com
qa2.ugc.marthastewart.com
*.secure.meredith.com
origin-www.fitpregnancy.com
secure.meredith.com
fitpregnancy.com
ugc.marthastewart.com
my.meredith.com
qa3.ugc.marthastewart.com
my.woodmagazine.com
secure.meredith.com
qa3.ugc.marthastewart.com
www.fitpregnancy.com
secure.meredith.com
mywedding.com
*.agriculture.com
dev.fitpregnancy.com
qa2.ugc.marthastewart.com
qa2.ugc.marthastewart.com
*.secure.meredith.com
my.woodmagazine.com
ugc.marthastewart.com
qa3.ugc.marthastewart.com
secure.meredith.com
qa3.ugc.marthastewart.com
www.fitpregnancy.com
qa2.ugc.marthastewart.com
qa4.ugc.marthastewart.com
qa4.ugc.marthastewart.com
origin-www.fitpregnancy.com
my.meredith.com
*.secure.meredith.com
www.fitpregnancy.com
*.secure.meredith.com
www.fitpregnancy.com
secure.meredith.com
dev.secure.meredith.com
dev.my.meredith.com
my.woodmagazine.com
dev.fitpregnancy.com
qa3.ugc.marthastewart.com
qa4.ugc.marthastewart.com
secure.meredith.com
secure.meredith.com
qa2.ugc.marthastewart.com
ugc.marthastewart.com
qa2.ugc.marthastewart.com
test.secure.meredith.com
my.woodmagazine.com
*.secure.meredith.com
qa2.ugc.marthastewart.com
ugc.marthastewart.com
fitpregnancy.com
mywedding.com
*.secure.meredith.com
qa3.ugc.marthastewart.com
mywedding.com
origin-www.fitpregnancy.com
qa2.ugc.marthastewart.com
*.secure.meredith.com

Certificate

The complete raw certificate details for origin-www.fitpregnancy.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0NiJvtmvAcImSUNNjcTk
ISBiAH+tuBTKQxww1jkZPwW6DGh2Dww+R7Yzb624b3BV2CN2cdkD3cTitw6DoqUM
M0Js27Qwx6TkQpqRbnDNp+awDFMj64UyeqGm2e0jpwu4ZiqIq3Iz1glZZNWy711M
/KXPzy3lggz7WzcAp1I1kX/trgVMCZzRNKe97tBHoy9vfLNIyZkyxBylxKKZDjfo
0RwJXt6RjqRE9OHem++Yr//xQFCV5xOeFd2aewmxwcoI10Gqej94XCqBo8EbpxuL
iOHvEzc6fGDA0mIifQpIHfGPapePaSb8rxhyhDOdOvb+gYQYk5rsMX1MzUZMXApF
8QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 169211608251547307299573980330986881168
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Organization Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-15 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-02-14 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Iowa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Meredith Operations Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'origin-www.fitpregnancy.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26364346334169856367882060745231491906787804268574870376641439531368431309571417322312797923726360706974011834474455401057716495700600544541440617824434201808813614741085200461102640209825142198077926875192013968228112295185729806872213849373166027389650900425566597886617744973904652117013185717768786054900660573396300152219734989691513230637675041818928217435602949776963900559746891983697710059201060366895810050579284784663227279913915764634314034166304375472410700606360099466813645830049939549628161248199853404907449162699084872833452041380436702508515685265783718840298400873480264451393320428181939051709937
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 17d9d6252767f931c24943d93036448c6ca94feb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f802e8dd8209e1203839a82c7b7507b218440504
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (600 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin-www.fitpregnancy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fitnessmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fitpregnancy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.midwestliving.mdpcdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.more.mdpcdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.parenting.mdpcdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.parents.mdpcdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.shape.mdpcdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'midwestliving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin-fitnessmagazine.mdpcdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin-fitpregnancy.mdpcdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin-midwestliving.mdpcdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin-parenting.mdpcdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin-parents.mdpcdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin-shape.mdpcdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin-www.fitnessmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin-www.midwestliving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin-www.parenting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin-www.parents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin-www.shape.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parenting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shape.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.parents.com'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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