hearst-uk.map.fastly.net

- Fastly, Inc. -

Issued by GlobalSign CloudSSL CA - SHA256 - G3

About this certificate

This digital certificate with serial number 2b:f4:ed:b1:bd:bc:8f:01:bd:09:cf:6d was issued on by GlobalSign nv-sa.

With 109 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Fastly, Inc.

Organization: Fastly, Inc.
State / Province: California
Locality: San Francisco
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 2b:f4:ed:b1:bd:bc:8f:01:bd:09:cf:6d
Serial Number (int): 13603955801905908432719433581
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: 33:d4:8c:3e:6e:cc:bd:09:fb:9d:5c:fb:a6:68:5f:59:dd:5e:2a:33
AuthorityKeyId: a9:2b:87:e1:ce:24:47:3b:1b:bf:cf:85:37:02:55:9d:0d:94:58:e6

Fingerprint (sha1): 53:36:e1:00:ee:85:1e:63:95:96:20:73:36:96:68:2c:33:27:36:9d
Fingerprint (sha256): 5a:ac:04:92:ac:e1:bc:44:44:d3:8f:ab:09:51:2a:25:33:6f:b1:66:a6:56:7a:b6:1a:ce:77:ce:1c:ce:fb:a7

Issuing Certificate URL: http://secure.globalsign.com/cacert/cloudsslsha2g3.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/cloudsslsha2g3

Check the revocation status for certificate hearst-uk.map.fastly.net

109

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for hearst-uk.map.fastly.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

hearst-uk.map.fastly.net
*.asdagoodliving.co.uk
*.bazaarartweek.co.uk
*.bazaaratwork.co.uk
*.bazaarsummit.co.uk
*.bicycling.nl
*.blogs.elle.es
*.cdnds.net
*.cosmopolitan.co.uk
*.cosmopolitan.it
*.countryliving.co.uk
*.crecerfeliz.es
*.digitalspy.co.uk
*.digitalspy.com
*.elle.co.jp
*.elle.it
*.ellebeautyawards.it
*.elledecor.it
*.elledecoration.co.uk
*.elleeten.nl
*.elleuk.com
*.elleweekender.co.uk
*.esquire.co.uk
*.financiallyfabulous.co.uk
*.fotogramas.es
*.gioia.it
*.glamour.nl
*.goodhousekeeping.co.uk
*.harpersbazaar.co.uk
*.harpersbazaar.jp
*.hdigital.net
*.hearst.it
*.hearstgames.com
*.hearstgames.net
*.hearstglobalsolutions.com
*.hearstmagazinesdirect.co.uk
*.housebeautiful.co.uk
*.marieclaire.it
*.menshealth.co.uk
*.menshealth.nl
*.micasarevista.com
*.netdoctor.co.uk
*.prima.co.uk
*.princess.hdigital.net
*.princessjourney.co.uk
*.qpmagazine.com
*.quemedices.es
*.quest.nl
*.quotenet.nl
*.redonline.co.uk
*.runnersworld.co.uk
*.salonqp.com
*.vogue.nl
*.womenshealth.es
*.womenshealthlive.co.uk
*.womenshealthmag.co.uk
*.womenshealthmag.nl
asdagoodliving.co.uk
bazaarartweek.co.uk
bazaaratwork.co.uk
bicycling.nl
blogs.elle.es
caranddriver.es
cosmopolitan.it
countryliving.co.uk
countrylivingshop.co.uk
crecerfeliz.es
delish.co.uk
digitalspy.co.uk
elle.it
ellebeautyawards.it
elledecor.it
elledecoration.co.uk
elleeten.nl
elleuk.com
elleweekender.co.uk
esquire.co.uk
financiallyfabulous.co.uk
fotogramas.es
gioia.it
glamour.nl
goodhousekeeping.co.uk
harpersbazaar.co.uk
harpersbazaar.jp
hearst.co.uk
hearst.it
hearstcontentagency.co.uk
hearstglobal.com
hearstglobalsolutions.com
hearstmagazinesdirect.co.uk
housebeautiful.co.uk
insidesoap.co.uk
jan-magazine.nl
marieclaire.it
menshealth.co.uk
menshealth.es
menshealth.nl
micasarevista.com
netdoctor.co.uk
princessjourney.co.uk
qpmagazine.com
quemedices.es
redonline.co.uk
runnersweb.nl
runnersworld.co.uk
townandcountrymag.co.uk
vogue.nl
womenshealthmag.co.uk
womenshealthmag.nl

Other certificates including the domain name hearst-uk.map.fastly.net

(limited to 100 certificates)
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net

Certificate

The complete raw certificate details for hearst-uk.map.fastly.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1wkjwQFAk9qG2wTvXjZ2
MLwe2kDHjWGhrI4uKVtC9didyiAC0Dp0P4M4OEka1oxDrC7bFkEw30dZ4FKfwoZl
TdoZMegGq+6ItwW0XIkq91a9HT1r4udzFpi3XyQeE0rCLFem8uDaT4IOv3HNfZnQ
HYPjw++1wfGNr5rHWQozwtnjz+wpVeuxgXmt3hfQmSoOWsbkYNYivMa0RK2a6pRR
Gkc89J9V2wzS4BSHbRZBjGGO7K0ANK9Qrf7sS5jM5JRCqMMGHXsn4LEdNA9LKI9s
sGcuPKFH04tmV/ODlmrx5xeVskVndEBMEiYYUyFM24C18vsIdqZq/OhRQ3xdDrL6
1wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13603955801905908432719433581
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign CloudSSL CA - SHA256 - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-05-05 00:01:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-04-15 22:30:44 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Fastly, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'hearst-uk.map.fastly.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27145742503883860879295111240660768133943789425859644201735974503250285556391814149862271421630387286091984455657243519185205060771184275249916416297506115778609108301145600479893886924159553765682457796447167197230967797380615458676111260389153827188332942801943181170300506289541081436699489243726231842383667126483903712043105372317447598553238717765759958385357622135313198682693534306565945200263532599551496777888252680316496995565372073635363362109966500045451952587452383471677486235083226277705165858404617150488593628668320767510868763124050485072221792392333480147731516388586496346107260787215035457010391
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/cloudsslsha2g3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/cloudsslsha2g3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2059 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hearst-uk.map.fastly.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.asdagoodliving.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bazaarartweek.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bazaaratwork.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bazaarsummit.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bicycling.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blogs.elle.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cdnds.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cosmopolitan.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cosmopolitan.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.countryliving.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.crecerfeliz.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.digitalspy.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.digitalspy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elle.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elle.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ellebeautyawards.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elledecor.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elledecoration.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elleeten.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elleuk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elleweekender.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.esquire.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.financiallyfabulous.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fotogramas.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gioia.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.glamour.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.goodhousekeeping.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.harpersbazaar.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.harpersbazaar.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hdigital.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hearst.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hearstgames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hearstgames.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hearstglobalsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hearstmagazinesdirect.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.housebeautiful.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.marieclaire.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.menshealth.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.menshealth.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.micasarevista.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.netdoctor.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prima.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.princess.hdigital.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.princessjourney.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qpmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.quemedices.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.quest.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.quotenet.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.redonline.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.runnersworld.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.salonqp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vogue.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.womenshealth.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.womenshealthlive.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.womenshealthmag.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.womenshealthmag.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asdagoodliving.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bazaarartweek.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bazaaratwork.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bicycling.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blogs.elle.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caranddriver.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cosmopolitan.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'countryliving.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'countrylivingshop.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crecerfeliz.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delish.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalspy.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elle.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ellebeautyawards.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elledecor.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elledecoration.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elleeten.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elleuk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elleweekender.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esquire.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'financiallyfabulous.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fotogramas.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gioia.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glamour.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goodhousekeeping.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harpersbazaar.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harpersbazaar.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hearst.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hearst.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hearstcontentagency.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hearstglobal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hearstglobalsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hearstmagazinesdirect.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'housebeautiful.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insidesoap.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jan-magazine.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marieclaire.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'menshealth.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'menshealth.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'menshealth.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'micasarevista.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netdoctor.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'princessjourney.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qpmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quemedices.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redonline.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'runnersweb.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'runnersworld.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'townandcountrymag.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vogue.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'womenshealthmag.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'womenshealthmag.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a92b87e1ce24473b1bbfcf853702559d0d9458e6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							33d48c3e6eccbd09fb9d5cfba6685f59dd5e2a33
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		004526ee88aea1547717df68cdfb2954b1678adf18d4e2d57167458bccac92c378e89b290c961bc500826d6293fca667d2d6d41af3be9ce7a07ca4075ba3d84fd9b08275b1cd1e28af68aba9f0e9957d63b9db1aede842463c3103eeb2700e69b3d726a55d4b439ad2742e525d258b9164015194698d90a979532065a73ed40c12c5c078e4d47c6dea24abfddd1b0398fd62bff80060724154ab9b5b7ad62c2e3b28741c9db4abc0e6f406cdd6ef068487bf4ded07bf45521c891350b45ca16022472e3c71f9b56a3a48d8d07b01a14f2723f5d16b873dfd6b06d3b3c048485a03d00bf0a5a60378cd8bc2a89f5e4a951302c5aa2e19a8d36427db8509addd0361