ziffdavis.com

- Ziff Davis, LLC -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 09:10:51:03:74:78:e1:f7:6a:48:35:02:99:32:e5:96 was issued on by DigiCert Inc.

With 94 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Ziff Davis, LLC

Organization: Ziff Davis, LLC
State / Province: New York
Locality: New York
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 09:10:51:03:74:78:e1:f7:6a:48:35:02:99:32:e5:96
Serial Number (int): 12047771860709582760380748792868300182
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 77:08:6c:4f:72:92:cf:04:be:16:f5:fd:cf:36:33:e8:52:d5:7b:56
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): de:12:dc:5c:6b:c9:ff:77:a6:9f:99:57:d7:73:22:c6:7b:b1:39:d0
Fingerprint (sha256): 59:55:a6:d9:4f:ce:a5:4b:1b:60:3d:db:4c:2c:33:83:b4:eb:d8:25:fe:89:78:f7:a9:88:17:17:55:bd:75:9c

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate ziffdavis.com

94

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ziffdavis.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ziffdavis.com
hosteddocs.readitquik.com
a.techhatchery.com
a.salesify.com
a.hrtechnologist.com
a.technosnip.com
geek.bdt.pcmag.com
btg.humblebundle.com
askmen.bdt.pcmag.com
dsar.ekahau.com
dsar.spiceworks.com
cdn.nsstatic.com
a.readitquik.com
dsar.insidecrm.com
hosteddocs.technology-signals.com
hosteddocs.emediausa.com
a.martechadvisor.com
*.emediausa.com
dsar.ookla.com
dsar.offers.com
a.technogrind.com
*.geek.com
*.medpagetoday.com
*.ziffdavisinternet.com
*.ziffdavisinternational.com
dsar.dealsofamerica.com
cdn.nsstatic.net
a.technegize.com
images.zdb2bmail.com
dsar.b2bsignals.com
diet.mayoclinic.org
a.techresearchhub.com
*.logicbuy.com
*.doctordirectory.com
*.adziff.com
dsar.salesify.com
dsar.itmanagement.com
hosteddocs.spiceworks.com
epson.ziffstatic.com
*.extremetech.com
dsar.creditcardsexplained.com
cdn1.techbargains.us.com
dsar.inside-erp.com
*.zdbb.net
zdbb.salesify.com
zdbb.offers.com
hosteddocs.emedia.co.uk
images.ziffdavismail.com
dsar.voip-news.com
dasr.swzd.com
zdstatic.diet.mayoclinic.org
www.offers.com
dsar.humblebundle.com
zdstatic.offers.com
dsar.ziffdavisb2b.com
*.pcmag.com
*.askmen.com
ign.bdt.pcmag.com
dsar.tippit.com
smart.ziffstatic.com
hosteddocs.martechadvisor.com
a.technology-signals.com
*.speedtest.net
dsar.couponcodes.com
cshopper.bdt.pcmag.com
zdbb.netshelter.net
*.everydayhealth.com
dsar.diet.mayoclinic.org
dsar.babycenter.com
dsar.spiceworksziffdavis.com
a.email.toolboxzd.com
dsar.emedia.com
*.ziffprod.com
*.ittoolbox.com
extremetech.bdt.pcmag.com
*.ziffprod.net
*.castleconnolly.com
a.techknocks.com
*.emedia.co.uk
*.whattoexpect.com
castleconnolly.com
*.mashable.com
*.techbargains.com
core.webtest.net
*.ziffdavis.com
hosteddocs.hrtechnologist.com
dsar.everydayhealthgroup.com
www.computershopper.com
analytics.email.toolbox.com
*.toolbox.com
api.webtest.net
dsar.formd.com
*.ign.com
p.toolboxzd.com

Other certificates including the domain name ziffdavis.com

(limited to 100 certificates)
ziffdavis.com
ziffdavis.com
vpn-eu.ziffdavis.com
ziffdavis.com
sli.ziffdavis.com
www.ziffdavis.com
sli.ziffdavis.com
*.ziffdavis.com
www.ziffdavis.com
ziffdavis.com
vpneast.ziffdavis.com
*.ziffdavis.com
ziffdavis.com
sli.ziffdavis.com
ziffdavis.com
*.ziffdavis.com
www.ziffdavis.com
www.ziffdavis.com
www.ziffdavis.com
ziffdavis.com
ziffdavis.com
www.ziffdavis.com
sli.ziffdavis.com
www.ziffdavis.com
sli.ziffdavis.com
ziffdavis.com
sli.ziffdavis.com
ziffdavis.com
sli.ziffdavis.com
ziffdavis.com
dev.signals.ziffdavis.com
*.ziffdavis.com
vpn-eu.ziffdavis.com
www.ziffdavis.com
ziffdavis.com
www.ziffdavis.com
www.ziffdavis.com
ziffdavis.com
ziffdavis.com
ziffdavis.com
ziffdavis.com
vpn-usw1.ziffdavis.com
ziffdavis.com
ziffdavis.com
ziffdavis.com
www.ziffdavis.com
ziffdavis.com
ziffdavis.com
vpneast.ziffdavis.com
ziffdavis.com
webmail.ziffdavis.com
sli.ziffdavis.com
sli.ziffdavis.com
www.ziffdavis.com
*.ziffdavis.com
vpn-eu.ziffdavis.com
ziffdavis.com
ziffdavis.com
ziffdavis.com
ziffdavis.com
team.ziffdavis.com
*.ziffdavis.com
ziffdavis.com
sli.ziffdavis.com
ziffdavis.com
vpn-eu.ziffdavis.com
ziffdavis.com
ziffdavis.com
sli.ziffdavis.com
ziffdavis.com
www.ziffdavis.com
ziffdavis.com
ziffdavis.com
shoppinginsights.ziffdavis.com
vpn-usw1.ziffdavis.com
ziffdavis.com
www.ziffdavis.com
sli.ziffdavis.com
ziffdavis.com
ziffdavis.com
*.ziffdavis.com
vpn-usw1.ziffdavis.com
ziffdavis.com
ziffdavis.com
www.ziffdavis.com
ziffdavis.com
ziffdavis.com
www.ziffdavis.com
ziffdavis.com
www.ziffdavis.com
ziffdavis.com
www.ziffdavis.com
ziffdavis.com
ziffdavis.com
sli.ziffdavis.com
www.ziffdavis.com
ziffdavis.com
www.ziffdavis.com
www.ziffdavis.com
webmail.ziffdavis.com

Certificate

The complete raw certificate details for ziffdavis.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5JwlcXwFAEt+MsF8bEo6
Ls38BqzayQGtBVfgKyNBsyGX/U1KJ0cveHRY1H45PY7rMkN+VCCE1FVjuTLWG10C
VeMVXTalHpttQdTd4HKXP4SP4lZpAXaj0zBEhnzTKRRVWeftUjI1Du30OAmgjPnE
5a/BTo0c33sV7bwzeEPicfKXAQtmqWGdtRZ8SXHWjXfI8ZioNV3UsEncyDNp6WXr
kD1B1ewPFTw3E0WtTaQA1U2IUMIBrbGa8QCbvpCh101nmuQSDkzoNwT1qX8hRRlw
61pk/y0heYnSQlDnrrcgLrjazoKPHYytUzvlvhwMY+kSE43UxOBuWUDy5UHAfVTl
JwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12047771860709582760380748792868300182
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-12 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-09-11 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ziff Davis, LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ziffdavis.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28859332124266933932389392953690022011100305458710907898004759571513682361299536893537902502398796565586148186154999692584792645041712465781924732433076776388131892908905435524873179949927613333472765426635325806955744434932461018208759992943815730868362389222185213826149826500282523913695364593899935256472939226755593378610190171637123985669645098396568624438059896128056176709268649243592853584176390133259450571861874820585656657948113421736382015164947819320850284204737634835064221301296617797768768040185569609718835221780613933952139142623507307387171838699896140651526131574606367594721704896028981515838759
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							77086c4f7292cf04be16f5fdcf3633e852d57b56
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1954 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ziffdavis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hosteddocs.readitquik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a.techhatchery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a.salesify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a.hrtechnologist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a.technosnip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geek.bdt.pcmag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'btg.humblebundle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'askmen.bdt.pcmag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dsar.ekahau.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dsar.spiceworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.nsstatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a.readitquik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dsar.insidecrm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hosteddocs.technology-signals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hosteddocs.emediausa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a.martechadvisor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.emediausa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dsar.ookla.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dsar.offers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a.technogrind.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.geek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.medpagetoday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ziffdavisinternet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ziffdavisinternational.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dsar.dealsofamerica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.nsstatic.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a.technegize.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.zdb2bmail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dsar.b2bsignals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diet.mayoclinic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a.techresearchhub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.logicbuy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.doctordirectory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adziff.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dsar.salesify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dsar.itmanagement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hosteddocs.spiceworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epson.ziffstatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.extremetech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dsar.creditcardsexplained.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn1.techbargains.us.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dsar.inside-erp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zdbb.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zdbb.salesify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zdbb.offers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hosteddocs.emedia.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.ziffdavismail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dsar.voip-news.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dasr.swzd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zdstatic.diet.mayoclinic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.offers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dsar.humblebundle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zdstatic.offers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dsar.ziffdavisb2b.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pcmag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.askmen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ign.bdt.pcmag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dsar.tippit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smart.ziffstatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hosteddocs.martechadvisor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a.technology-signals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.speedtest.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dsar.couponcodes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cshopper.bdt.pcmag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zdbb.netshelter.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.everydayhealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dsar.diet.mayoclinic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dsar.babycenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dsar.spiceworksziffdavis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a.email.toolboxzd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dsar.emedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ziffprod.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ittoolbox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'extremetech.bdt.pcmag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ziffprod.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.castleconnolly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a.techknocks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.emedia.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.whattoexpect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'castleconnolly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mashable.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.techbargains.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'core.webtest.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ziffdavis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hosteddocs.hrtechnologist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dsar.everydayhealthgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.computershopper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'analytics.email.toolbox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.toolbox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.webtest.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dsar.formd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p.toolboxzd.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e300000172a99b4b9e000004030047304502203bb429f9424f51f205c3e04a32b51123f8999da25975b87386d635be51890c8a02210094866321e479c70d15335f5835dc34c94054658edee933784bf14d7385a1d63f0075005cdc4392fee6ab4544b15e9ad456e61037fbd5fa47dca17394b25ee6f6c70eca00000172a99b4bb60000040300463044022018acb119f4ba58178611fb9c459a7b8663ce822b94690908c9ece309d1c3046102202c5934e6bb5ee52d6f19197acca72d00e1bb4a03273c47d5b618f6b4ba6f2ecb
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00a3f767c0bb9e5b275c3fbd2ed28056e227eee5031a8561b355237ed7e4dc45ae26c2cb584e26ed0706c0193b323e8a21e6313018b971d51457c370c15d9ab56a8330ab99810a68823dd60da4b043fa87c2b341a13d943fdeed217ccb5b81577e8f15fc727f07edb2aa8f5ce7483e915d5d176af04ff2afb4f4eca1ce5b233cfc64be6a72b39917fd02083ead5336fa2badaa1e9fae930a8bede29526371fca4a00157caf03c98bf512b5ed917c034f9266850de7a6313698c033d084032f3be233e2440423d8a095f4f6a007ab95f76896f4ec938a69b3e665e4603564b5d0c802cf04de681ca8adec493e68abe987d6368be68428b8f22cb8625f6e0c2deb2c