secure.meredith.com

Issued by Amazon

About this certificate

This digital certificate with serial number 0d:a2:01:43:02:fe:7a:7e:79:9b:27:bb:2b:50:16:8e was issued on by Amazon.

With 68 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Apple recommends that certificates be issued with a maximum validity of 397 days. TLS server certificates issued on or after September 1, 2020 00:00 GMT/UTC should not have a validity period greater than 397 days (https://support.apple.com/en-us/HT211025)

Certificate Subject

CN=secure.meredith.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0d:a2:01:43:02:fe:7a:7e:79:9b:27:bb:2b:50:16:8e
Serial Number (int): 18121141627909656170540585420437067406
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 9a:99:12:42:e6:2f:1e:31:d0:f4:1b:36:7b:f4:cc:77:f2:88:38:d3
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 0f:03:28:7f:58:b2:f3:bf:bd:b6:ad:70:59:16:a4:8d:44:9e:35:f0
Fingerprint (sha256): 46:7f:21:ce:2d:45:ff:a2:67:5a:f8:6d:a7:05:80:48:b3:b2:32:a0:1e:a0:6e:62:8f:d4:b0:fe:f3:9a:22:e9

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate secure.meredith.com

68

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for secure.meredith.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

secure.meredith.com
secure.peopleenespanol.com
secure.ew.com
secure.coastalliving.com
secure.midwestliving.com
secure.diabeticlivingonline.com
secure.familycircle.com
secure.more.com
www.meredithcsa.com
secure.foodandwine.com
secure.fitnessmagazine.com
secure.fitpregnancy.com
secure.quizler.meredith.com
secure.realsimple.com
secure.travelandleisure.com
cr-iframe.secure.themagnoliajournal.com
secure.entertainmentweekly.com
cr-iframe.secure.shape.com
secure.woodmagazine.com
secure.lhj.com
secure.themagnoliajournal.com
secure.departures.com
cr-iframe.secure.diabeticlivingonline.com
secure.agriculture.com
secure.traditionalhome.com
secure.divinecaroline.com
secure.parents.com
cr-iframe.secure.allrecipesmagazine.com
cr-iframe.secure.agriculture.com
cr-iframe.secure.allpeoplequilt.com
secure.livingthecountrylife.com
cr-iframe.secure.familycircle.com
secure.hellogiggles.com
cr-iframe.secure.rachaelraymag.com
secure.instyle.com
cr-iframe.secure.traditionalhome.com
cr-iframe.secure.woodmagazine.com
secure.allrecipesmagazine.com
cr-iframe.secure.parents.com
www.magazine.store
cr-iframe.secure.bhg.com
secure.marthastewartweddings.com
secure.eatingwell.com
cr-iframe.secure.marthastewartweddings.com
secure.travelmeredith.com
secure.rachaelraymag.com
magazine.store
secure.health.com
cr-iframe.secure.midwestliving.com
cr-iframe.secure.fitnessmagazine.com
cr-iframe.secure.eatingwell.com
secure.southernliving.com
secure.mdp.allrecipes.com
secure.recipe.com
secure.myrecipes.com
secure.bhg.com
cr-iframe.secure.livingthecountrylife.com
secure.people.com
secure.child.com
cr-iframe.secure.marthastewart.com
secure.marthastewart.com
secure.parenting.com
cr-iframe.magazine.store
secure.cookinglight.com
secure.magazine.store
secure.mywedding.com
secure.shape.com
secure.allpeoplequilt.com

Other certificates including the domain name meredith.com

(limited to 100 certificates)
wpm.ccmp.eu
payments.meredith.com
vcacontent.meredith.com
secure.meredith.com
dyncat.cip.meredith.com
*.meredith.com
secure.static.meredith.com
*.secure.meredith.com
secure.meredith.com
matrixdev.meredith.com
meredith.com
*.meredith.com
my.meredith.com
test.secure.static.meredith.com
meredith.com
images.meredith.com
citrix.meredith.com
wpm03.eccmp.com
*.meredith.com
5713573250596864-fe4.pantheonsite.io
images.meredith.com
munkireport.meredith.com
payments.meredith.com
meredith.com
woodwing.meredith.com
secure.static.meredith.com
*.meredith.com
es.meredith.com
*.woodwing.meredith.com
kptvoasis.meredith.com
www.meredith.com
webmail.meredith.com
wpm.ccmp.eu
specialoffers.meredith.com
splunk.meredith.com
secure.static.meredith.com
wpm03.eccmp.com
intranet.meredith.com
akamai-san192.exacttarget.com
secure.meredith.com
wpm.ccmp.eu
*.meredith.com
360.meredith.com
wpm.ccmp.eu
*.images.meredith.com
quizler.meredith.com
chrysler-stg.meredith.com
Dashboards.meredith.com
*.agriculture.com
dev.app.meredith.com
adobefrl.meredith.com
collabedge.meredith.com
go.meredith.com
dev.secure.meredith.com
*.meredith.com
5713573250596864-fe4.pantheonsite.io
*.meredith.com
*.meredith.com
360-auth.meredith.com
wpm03.eccmp.com
*.meredith.com
images.qa.shopnation.com
ise.meredith.com
wpm.ccmp.eu
secure.static.meredith.com
secure.meredith.com
images.meredith.com
assets.meredith.com
*.elvis.meredith.com
accounts.bhg.com
accounts.bhg.com
*.meredith.com
*.meredith.com
LCS.MEREDITH.COM
5713573250596864-fe4.pantheonsite.io
5713573250596864-fe4.pantheonsite.io
wpm03.eccmp.com
*.elvis.meredith.com
origin-secure.meredith.com
secure.meredith.com
mywedding.com
origin-dev.secure.meredith.com
secure.meredith.com
admin-dev.meredith.com
mywedding.com
www.meredith.com
meredith.com
dev-theshop.meredith.com
mdp.api.meredith.com
wpm.ccmp.eu
secure.meredith.com
accounts.bhg.com
*.meredith.com
*.meredith.com
*.meredith.com
images.meredith.com
meredith.com
*.meredith.com
wpm03.eccmp.com
images.meredith.com

Certificate

The complete raw certificate details for secure.meredith.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg8rrK596M+RDAmc9fd2E
SijyPuq1PUqX2CHxNtD1L47POD2MjgiOXJ3QCl0rt3FUgJ0HANu/s7Vko8XqPLDm
h8YMhfo13JVJ7EKzmC+DuERb1b8wJ6b5segO3hrx0oqUN1J+uEMurOzmHfPKCS9z
qNse3mVpBtpgTi3J2wM8PUzkNAqTy1qQ8/oMXJVds0B1ae81byWmU7VOb1pqprkC
g9/AOdMZo1Lfyv3cxcqufTPgjHRmvWoE4d8wVgcNI3V099p+fm1/Xtc4GpxCB06C
TraVdttLrPKqkbHTb2v0ScFRqOej7Fqz44CR5iq8zF6qwouK7tFNiCrYpHnjl+V7
owIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18121141627909656170540585420437067406
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-10-08 00:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'secure.meredith.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 16637280858563847642918873404638109507728249500570702991338508588621551951465781841197076410194560157097198901537012899524394760612239295268030762922052159377003966259676936592942854402292147193744106376978498782374045229631574832047849677572587905852250883393683056207805316237905003992894581583772076387544233871318776556918905110186051688438374049247427247839226620507632985140878486404032238333163340606090599773977994347142311564599238101878856073344639155908579848520232042725669632284612631955349094720926897036584720665259111697601389967957770908960484582233356167561850233374794851637648871529140324005149603
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9a991242e62f1e31d0f41b367bf4cc77f28838d3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1865 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.meredith.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.peopleenespanol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.ew.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.coastalliving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.midwestliving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.diabeticlivingonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.familycircle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.more.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.meredithcsa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.foodandwine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.fitnessmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.fitpregnancy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.quizler.meredith.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.realsimple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.travelandleisure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cr-iframe.secure.themagnoliajournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.entertainmentweekly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cr-iframe.secure.shape.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.woodmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.lhj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.themagnoliajournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.departures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cr-iframe.secure.diabeticlivingonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.agriculture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.traditionalhome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.divinecaroline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.parents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cr-iframe.secure.allrecipesmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cr-iframe.secure.agriculture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cr-iframe.secure.allpeoplequilt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.livingthecountrylife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cr-iframe.secure.familycircle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.hellogiggles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cr-iframe.secure.rachaelraymag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.instyle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cr-iframe.secure.traditionalhome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cr-iframe.secure.woodmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.allrecipesmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cr-iframe.secure.parents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.magazine.store'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cr-iframe.secure.bhg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.marthastewartweddings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.eatingwell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cr-iframe.secure.marthastewartweddings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.travelmeredith.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.rachaelraymag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.store'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.health.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cr-iframe.secure.midwestliving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cr-iframe.secure.fitnessmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cr-iframe.secure.eatingwell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.southernliving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mdp.allrecipes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.recipe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.myrecipes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.bhg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cr-iframe.secure.livingthecountrylife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.people.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.child.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cr-iframe.secure.marthastewart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.marthastewart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.parenting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cr-iframe.magazine.store'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.cookinglight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.magazine.store'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mywedding.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.shape.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.allpeoplequilt.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e300000174611c33d90000040300473045022100f0a2bce0772fdea0cbb652dff33126c230e043bc7c7797674ff91d7ab70cc16a02201ce3541bf1b248b2cb515d7b62dc0d998fe78f1fed9b1bb215bffeb8652874760077005cdc4392fee6ab4544b15e9ad456e61037fbd5fa47dca17394b25ee6f6c70eca00000174611c33d90000040300483046022100ac86a6743f11c7c0c67b0ec9c9626bdd67b56c2d3ec45a9b4ce14052fc8fcc0d022100c1d37d7c0841e2788e3953f1c59ba55cd6729621241f5e64458a087c5bee5329
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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