*.secure.meredith.com

Issued by Amazon

About this certificate

This digital certificate with serial number 09:dd:20:38:0b:aa:3e:aa:ce:43:3d:6b:7d:10:98:10 was issued on by Amazon.

With 68 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.secure.meredith.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 09:dd:20:38:0b:aa:3e:aa:ce:43:3d:6b:7d:10:98:10
Serial Number (int): 13111203045295005849196478673204582416
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 53:8a:86:7f:b0:7c:a0:9c:37:09:59:e6:55:71:6d:bd:8a:83:2f:ed
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): a9:e2:e1:2f:4d:ea:c2:74:d7:01:b7:c3:75:a7:d4:9b:02:c3:87:ea
Fingerprint (sha256): 44:cd:76:ec:40:bf:47:68:2f:b4:cd:13:ab:77:c8:9c:13:8b:99:73:86:d5:93:83:ac:35:54:6f:c8:25:d6:fb

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate *.secure.meredith.com

68

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.secure.meredith.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.secure.meredith.com
*.secure.agriculture.com
*.secure.allpeoplequilt.com
*.secure.allrecipesmagazine.com
*.secure.bhg.com
*.secure.child.com
*.secure.diabeticlivingonline.com
*.secure.divinecaroline.com
*.secure.eatingwell.com
*.secure.familycircle.com
*.secure.mywedding.com
*.secure.fitnessmagazine.com
*.secure.fitpregnancy.com
*.secure.lhj.com
*.secure.livingthecountrylife.com
*.secure.marthastewart.com
*.secure.marthastewartweddings.com
*.secure.midwestliving.com
*.secure.more.com
*.secure.parenting.com
*.secure.parents.com
*.secure.quizler.meredith.com
*.secure.rachaelraymag.com
*.secure.recipe.com
*.secure.shape.com
*.secure.traditionalhome.com
*.secure.travelmeredith.com
*.secure.woodmagazine.com
*.secure.mdp.allrecipes.com
*.magazine.store
*.secure.poshcoloringstudio.com
*.secure.magazine.store
*.secure.themagnoliajournal.com
*.meredithcsa.com
*.secure.people.com
*.secure.coastalliving.com
*.secure.cookinglight.com
*.secure.departures.com
*.secure.entertainmentweekly.com
*.secure.foodandwine.com
*.secure.health.com
*.secure.hellogiggles.com
*.secure.instyle.com
*.secure.myrecipes.com
*.secure.peopleenespanol.com
*.secure.realsimple.com
*.secure.southernliving.com
*.secure.travelandleisure.com
*.secure.ew.com
*.cr-iframe.magazine.store
*.cr-iframe.secure.agriculture.com
*.cr-iframe.secure.allpeoplequilt.com
*.cr-iframe.secure.bhg.com
*.cr-iframe.secure.diabeticlivingonline.com
*.cr-iframe.secure.eatingwell.com
*.cr-iframe.secure.familycircle.com
*.cr-iframe.secure.fitnessmagazine.com
*.cr-iframe.secure.livingthecountrylife.com
*.cr-iframe.secure.marthastewart.com
*.cr-iframe.secure.marthastewartweddings.com
*.cr-iframe.secure.midwestliving.com
*.cr-iframe.secure.parents.com
*.cr-iframe.secure.rachaelraymag.com
*.cr-iframe.secure.shape.com
*.cr-iframe.secure.themagnoliajournal.com
*.cr-iframe.secure.traditionalhome.com
*.cr-iframe.secure.woodmagazine.com
*.cr-iframe.secure.allrecipesmagazine.com

Other certificates including the domain name meredith.com

(limited to 100 certificates)
wpm.ccmp.eu
payments.meredith.com
vcacontent.meredith.com
secure.meredith.com
dyncat.cip.meredith.com
*.meredith.com
secure.static.meredith.com
*.secure.meredith.com
secure.meredith.com
matrixdev.meredith.com
meredith.com
*.meredith.com
my.meredith.com
test.secure.static.meredith.com
meredith.com
images.meredith.com
citrix.meredith.com
wpm03.eccmp.com
*.meredith.com
5713573250596864-fe4.pantheonsite.io
images.meredith.com
munkireport.meredith.com
payments.meredith.com
meredith.com
woodwing.meredith.com
secure.static.meredith.com
*.meredith.com
es.meredith.com
*.woodwing.meredith.com
kptvoasis.meredith.com
www.meredith.com
webmail.meredith.com
wpm.ccmp.eu
specialoffers.meredith.com
splunk.meredith.com
secure.static.meredith.com
wpm03.eccmp.com
intranet.meredith.com
akamai-san192.exacttarget.com
secure.meredith.com
wpm.ccmp.eu
*.meredith.com
360.meredith.com
wpm.ccmp.eu
*.images.meredith.com
quizler.meredith.com
chrysler-stg.meredith.com
Dashboards.meredith.com
*.agriculture.com
dev.app.meredith.com
adobefrl.meredith.com
collabedge.meredith.com
go.meredith.com
dev.secure.meredith.com
*.meredith.com
5713573250596864-fe4.pantheonsite.io
*.meredith.com
*.meredith.com
360-auth.meredith.com
wpm03.eccmp.com
*.meredith.com
images.qa.shopnation.com
ise.meredith.com
wpm.ccmp.eu
secure.static.meredith.com
secure.meredith.com
images.meredith.com
assets.meredith.com
*.elvis.meredith.com
accounts.bhg.com
accounts.bhg.com
*.meredith.com
*.meredith.com
LCS.MEREDITH.COM
5713573250596864-fe4.pantheonsite.io
5713573250596864-fe4.pantheonsite.io
wpm03.eccmp.com
*.elvis.meredith.com
origin-secure.meredith.com
secure.meredith.com
mywedding.com
origin-dev.secure.meredith.com
secure.meredith.com
admin-dev.meredith.com
mywedding.com
www.meredith.com
meredith.com
dev-theshop.meredith.com
mdp.api.meredith.com
wpm.ccmp.eu
secure.meredith.com
accounts.bhg.com
*.meredith.com
*.meredith.com
*.meredith.com
images.meredith.com
meredith.com
*.meredith.com
wpm03.eccmp.com
images.meredith.com

Certificate

The complete raw certificate details for *.secure.meredith.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA98jttAdUIQ5mjY74qA/c
/wCyxUoBJJfysZX011Ktuw8XlZS8Q7dgS2p6VUHtnX2seVgPK8FHmxiadKm2VQny
ijrbPAc3U6rhgCesO7oDEfHJcaO8XnGQo/UrXfcVpDig8rEYqLtjEX7h4Gn+gsmr
5EJs/K9wY3+tnvtXbIb/Ai9v+o0Me9K+RTwOC2eFgHp6XOXWC6c6Zj6lqzqNcQZl
M3KFDldhjTCVnh8eb6LsoHnaQk83J4LRlqnI/sI+43SddqIvUe3kktc5KPrlvYvJ
QgAQhLyd0vfXLuJ44636CIzf7oyYxAvE01nBh0VZ0fTXbwQn4LcDsGSX4en+S12T
TwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13111203045295005849196478673204582416
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-17 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-17 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.secure.meredith.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 31279942876725794620047534415404566710123132064549992856651643288925891920347351335095884470786878719244499463324026074662151547305752647880620688553828117642079401942358631849731532526110981360188872405770407236825271663074542519063535869354041815743379090943142007040400570222420830436497628949004110634514579272887933330976697922482253423225910344439426025349815420218211524471804132489383319574564004399309059087147134119031026938278217444432529463333623258464481156164361478222972935016968355655234471348359849624958205381928754622766505121795853947091873456482522226822115277145866643082075082209992958394864463
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							538a867fb07ca09c370959e655716dbd8a832fed
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2008 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secure.meredith.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secure.agriculture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secure.allpeoplequilt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secure.allrecipesmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secure.bhg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secure.child.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secure.diabeticlivingonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secure.divinecaroline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secure.eatingwell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secure.familycircle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secure.mywedding.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secure.fitnessmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secure.fitpregnancy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secure.lhj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secure.livingthecountrylife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secure.marthastewart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secure.marthastewartweddings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secure.midwestliving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secure.more.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secure.parenting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secure.parents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secure.quizler.meredith.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secure.rachaelraymag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secure.recipe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secure.shape.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secure.traditionalhome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secure.travelmeredith.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secure.woodmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secure.mdp.allrecipes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.magazine.store'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secure.poshcoloringstudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secure.magazine.store'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secure.themagnoliajournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.meredithcsa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secure.people.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secure.coastalliving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secure.cookinglight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secure.departures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secure.entertainmentweekly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secure.foodandwine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secure.health.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secure.hellogiggles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secure.instyle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secure.myrecipes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secure.peopleenespanol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secure.realsimple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secure.southernliving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secure.travelandleisure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secure.ew.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cr-iframe.magazine.store'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cr-iframe.secure.agriculture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cr-iframe.secure.allpeoplequilt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cr-iframe.secure.bhg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cr-iframe.secure.diabeticlivingonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cr-iframe.secure.eatingwell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cr-iframe.secure.familycircle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cr-iframe.secure.fitnessmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cr-iframe.secure.livingthecountrylife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cr-iframe.secure.marthastewart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cr-iframe.secure.marthastewartweddings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cr-iframe.secure.midwestliving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cr-iframe.secure.parents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cr-iframe.secure.rachaelraymag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cr-iframe.secure.shape.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cr-iframe.secure.themagnoliajournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cr-iframe.secure.traditionalhome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cr-iframe.secure.woodmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cr-iframe.secure.allrecipesmagazine.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc10000001668294d4010000040300473045022100a6fbc0fec07d935ce91f1b9d4366917723bebd1d1b8340232169d1c7a5137bf402206630e08f375bb5664631cac45ee152ec81e542a132fdc698368173806c2c4c910076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f000001668294d4f50000040300473045022100d9ce70f05c1628eedaa099a665b3485b3e475f59170b56bca989e4716e46d34f02200b160c48e5d7fdf77f5f4057b39e2e400d3bc7dd17ff89c4f7ae081517914c88
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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