cosmopolitan.com

Issued by GlobalSign Atlas R3 DV TLS CA 2022 Q3

About this certificate

This digital certificate with serial number 01:ec:9e:d1:b0:22:b0:ef:4c:45:f8:be:a7:4b:1d:fb was issued on by GlobalSign nv-sa.

With 123 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cosmopolitan.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 01:ec:9e:d1:b0:22:b0:ef:4c:45:f8:be:a7:4b:1d:fb
Serial Number (int): 2557831288313778395603065490016771579
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 69:93:d7:a7:f0:bf:ab:c0:d5:a4:fc:b6:e3:83:a6:5d:32:3c:c9:6d
AuthorityKeyId: fa:91:39:63:9a:fb:ad:10:24:e5:be:b5:b9:da:ab:d9:c4:46:69:ab

Fingerprint (sha1): 0c:0c:c1:51:a2:10:32:84:c4:95:6e:2e:4f:78:8f:f6:4f:ab:7c:40
Fingerprint (sha256): 53:ff:de:29:45:b1:a8:69:e7:74:50:79:88:5c:64:1a:58:78:b6:0b:5c:75:4a:01:66:7c:6a:1d:5c:4e:06:ef

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2022q3.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q3
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2022q3.crl

Check the revocation status for certificate cosmopolitan.com

123

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cosmopolitan.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cosmopolitan.com
*.25ans.jp
*.altaonline.com
*.autoweek.com
*.bazaar.com
*.bestproducts.com
*.bicycling.com
*.bringatrailer.com
*.caranddriver.com
*.cdn.hearstapps.net
*.cosmopolitan.com
*.countryliving.com
*.crfashionbook.com
*.delish.com
*.dev.mediaos.hearst.io
*.drozthegoodlife.com
*.elle.com
*.elledecor.com
*.ellegirl.jp
*.esquire.com
*.fujingaho.jp
*.gearpatrol.com
*.ghsealapplication.com
*.goodhouse.com
*.goodhousekeeping.com
*.h-cdn.co
*.harpersbazaar.com
*.hdmtech.net
*.hdmtools.com
*.hearst.io
*.hearstapps.com
*.hearstapps.net
*.hearstdigitalstudios.com
*.hearstdigitalstudios.net
*.hearstlabs.com
*.hearstmags.com
*.housebeautiful.com
*.menshealth.com
*.myio.id
*.mylo.id
*.oprahdaily.com
*.oprahmag.com
*.popularmechanics.com
*.prevention.com
*.redbookmag.com
*.rnylo.com
*.rnylo.id
*.roadandtrack.com
*.rodalesorganiclife.com
*.rrylo.com
*.rrylo.id
*.runnersworld.com
*.s-w-e-e-t.com
*.seventeen.com
*.shondaland.com
*.thepioneerwoman.com
*.thepioneerwomancooks.com
*.todays-rewards.com
*.townandcountrymag.com
*.veranda.com
*.wearesweet.co
*.womansday.com
*.womenshealthmag.com
25ans.jp
altaonline.com
autoweek.com
bazaar.com
bestproducts.com
bicycling.com
bringatrailer.com
caranddriver.com
countryliving.com
crfashionbook.com
delish.com
drozthegoodlife.com
elle.com
elledecor.com
ellegirl.jp
esquire.com
fujingaho.jp
gearpatrol.com
ghsealapplication.com
goodhouse.com
goodhousekeeping.com
harpersbazaar.com
hdmtech.net
hearstlabs.com
housebeautiful.com
menshealth.com
myio.id
mylo.id
oprahdaily.com
oprahmag.com
popularmechanics.com
prevention.com
redbookmag.com
rnylo.com
rnylo.id
roadandtrack.com
rodalesorganiclife.com
rrylo.com
rrylo.id
runnersworld.com
s-w-e-e-t.com
seventeen.com
shondaland.com
thepioneerwoman.com
thepioneerwomancooks.com
todays-rewards.com
townandcountrymag.com
veranda.com
wearesweet.co
womansday.com
womenshealthmag.com
hearstlive.co.uk
*.menshealth.it
*.runnersworld.it
menshealth.it
runnersworld.it
*.modernliving.jp
modernliving.jp
*.firstfinds.com
firstfinds.com

Other certificates including the domain name cosmopolitan.com

(limited to 100 certificates)
*.25ans.jp
dns-vetting1-mims-pawel.map.fastly.net
hearst-prod.actioniq.mr-in.com
dns-vetting1-mims-pawel.map.fastly.net
hearst-prod.actioniq.mr-in.com
dns-vetting1-mims-pawel.map.fastly.net
hearst-prod.actioniq.mr-in.com
shop.elle.com
sli.esquire.com
dns-vetting1-mims-pawel.map.fastly.net
cosmopolitan.com
mcstaging-shop.elle.com
hearst-prod.actioniq.mr-in.com
mcstaging-shop.elle.com
shop.elle.com
*.hearstapps.com
dns-vetting1-mims-pawel.map.fastly.net
dns-vetting1-mims-pawel.map.fastly.net
secure.hdmtools.com
dns-vetting1-mims-pawel.map.fastly.net
shop.elle.com
cosmopolitan.com
shop.elle.com
actieabonnement.live.hearst.aubergine-it.nl
actieabonnement.live.hearst.aubergine-it.nl
dns-vetting1-mims-pawel.map.fastly.net
store.caranddriver.com
dns-vetting1-mims-pawel.map.fastly.net
subscribe.hearstmags.com
sli.esquire.com
sli.esquire.com
mcstaging-shop.elle.com
shop.elle.com
dns-vetting1-mims-pawel.map.fastly.net
hearst-hdm.map.fastly.net
hearst-hdm.map.fastly.net
hearst-hdm.map.fastly.net
shop.cosmopolitan.com
shop.elle.com
dns-vetting1-mims-pawel.map.fastly.net
hearst-hdm.map.fastly.net
actieabonnement.live.hearst.aubergine-it.nl
sli.esquire.com
cosmopolitan.com
subscribe.hearstmags.com
dns-vetting1-mims-pawel.map.fastly.net
magentocloud55.map.fastly.net
subscribe.hearstmags.com
dns-vetting1-mims-pawel.map.fastly.net
subscribe.hearstmags.com
cosmopolitan.com
mcstaging-store.delish.com
shop.elle.com
shop.elle.com
hearst-prod.actioniq.mr-in.com
shop.elledecor.com
mcstaging-shop.elle.com
actieabonnement.live.hearst.aubergine-it.nl
mcstaging-shop.elle.com
dns-vetting1-mims-pawel.map.fastly.net
subscribe.hearstmags.com
sli.esquire.com
actieabonnement.live.hearst.aubergine-it.nl
shop.elle.com
hearst-hdm.map.fastly.net
subscribe.hearstmags.com
abonnement.bicycling.nl
actieabonnement.live.hearst.aubergine-it.nl
dns-vetting1-mims-pawel.map.fastly.net
mcstaging-store.delish.com
actieabonnement.live.hearst.aubergine-it.nl
cosmopolitan.com
store.caranddriver.com
dns-vetting1-mims-pawel.map.fastly.net
mcstaging-shop.elle.com
link.cosmopolitan.com
shop.elle.com
shop.elle.com
sli.esquire.com
dns-vetting1-mims-pawel.map.fastly.net
mcstaging-store.delish.com
hearst-hdm.map.fastly.net
subscribe.hearstmags.com
cosmopolitan.com
dns-vetting1-mims-pawel.map.fastly.net
mcstaging-shop.elle.com
mcstaging-shop.elle.com
dns-vetting1-mims-pawel.map.fastly.net
shop.elle.com
shop.elle.com
link.cosmopolitan.com
dns-vetting1-mims-pawel.map.fastly.net
hearst-hdm.map.fastly.net
sli.esquire.com
td.cosmopolitan.com
hearst-hdm.map.fastly.net
hearst-hdm.map.fastly.net
mcstaging-shop.elle.com
hearst-hdm.map.fastly.net
hearst-hdm.map.fastly.net

Certificate

The complete raw certificate details for cosmopolitan.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9tItHZJeqsqIKhqBgo3
E2EkJF7NUD5fEQ3GwUjF4fqE7tdi0lIXiQqNJQ87ijTRpciTZ0nLTKXkEYK+Wy6I
zpR2kchniRP9M6RmgP39HG6NEGAU4+pBG5suWwQFtg6xKdkgJH8R58zlKVjavqjV
Y8eDQsSUerC+JKd871gP7RyvScBIJXs1789OVGcKZIxa3d4L8fSkpyELyiOY/sHL
i6VKFbojhSd/u5g3exjdedLZkXYXFJ9CANzlkhRCiXG/rAQKW6CrBEU14goPetJ8
3BpmAhcPrTi90l/0Z5DWVvOKmhms9aZ59a2wf6JprQ4YX4myT2qSWIBmE8wg2nHJ
jwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2557831288313778395603065490016771579
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2022 Q3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-21 17:46:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-23 17:46:17 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'cosmopolitan.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19170117022237103010962799750778631795041881036337971001272906855682364797877278439713755579550355951251116656785862661845705298332385140477810066240248219253021274542663825503862663079666764515109132994018079332499736504956765996159062902195370279999402980494504222796057959140777997327567699700367627774767920620878768525499692390758096200848215268856051264708278985937342477876035428879099257283352267912501543945511463135800221544371399787478380747342114758033823916079853371624964525266087264403132412355330157879339422894929281032063032982986615187757748898069649628857711623695674929670021903906560455535085967
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2142 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cosmopolitan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.25ans.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.altaonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.autoweek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bazaar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bestproducts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bicycling.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bringatrailer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.caranddriver.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cdn.hearstapps.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cosmopolitan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.countryliving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.crfashionbook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.delish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.mediaos.hearst.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.drozthegoodlife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elledecor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ellegirl.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.esquire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fujingaho.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gearpatrol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ghsealapplication.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.goodhouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.goodhousekeeping.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.h-cdn.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.harpersbazaar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hdmtech.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hdmtools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hearst.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hearstapps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hearstapps.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hearstdigitalstudios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hearstdigitalstudios.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hearstlabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hearstmags.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.housebeautiful.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.menshealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myio.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mylo.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oprahdaily.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oprahmag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.popularmechanics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prevention.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.redbookmag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rnylo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rnylo.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.roadandtrack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rodalesorganiclife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rrylo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rrylo.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.runnersworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.s-w-e-e-t.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.seventeen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shondaland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thepioneerwoman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thepioneerwomancooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.todays-rewards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.townandcountrymag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.veranda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wearesweet.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.womansday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.womenshealthmag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '25ans.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'altaonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autoweek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bazaar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestproducts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bicycling.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bringatrailer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caranddriver.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'countryliving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crfashionbook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drozthegoodlife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elledecor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ellegirl.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esquire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fujingaho.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gearpatrol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ghsealapplication.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goodhouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goodhousekeeping.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harpersbazaar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hdmtech.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hearstlabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'housebeautiful.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'menshealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myio.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylo.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oprahdaily.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oprahmag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'popularmechanics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prevention.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redbookmag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rnylo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rnylo.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roadandtrack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rodalesorganiclife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rrylo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rrylo.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'runnersworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's-w-e-e-t.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seventeen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shondaland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thepioneerwoman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thepioneerwomancooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'todays-rewards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'townandcountrymag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'veranda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wearesweet.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'womansday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'womenshealthmag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hearstlive.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.menshealth.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.runnersworld.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'menshealth.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'runnersworld.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.modernliving.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'modernliving.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.firstfinds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firstfinds.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6993d7a7f0bfabc0d5a4fcb6e383a65d323cc96d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q3'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2022q3.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName fa9139639afbad1024e5beb5b9daabd9c44669ab
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2022q3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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