cosmopolitan.com

Issued by GlobalSign Atlas R3 DV TLS CA 2024 Q1

About this certificate

This digital certificate with serial number 01:41:56:bb:0e:bf:67:76:d7:d8:40:7f:40:d2:c9:64 was issued on by GlobalSign nv-sa.

With 134 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=cosmopolitan.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate will expire on

Certificate Details

Serial Number (hex): 01:41:56:bb:0e:bf:67:76:d7:d8:40:7f:40:d2:c9:64
Serial Number (int): 1668486399046167444907892412125464932
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 0d:40:27:07:2a:0b:d5:6b:6a:70:56:65:95:fe:f7:72:09:9d:42:94
AuthorityKeyId: 66:c0:c7:a3:9a:cd:fe:f3:ea:ce:4b:53:0b:61:5e:af:33:05:b3:e1

Fingerprint (sha1): 9b:34:ab:e6:07:eb:20:81:4c:43:6a:28:4b:af:dc:79:14:01:cd:e6
Fingerprint (sha256): 5b:19:e0:e9:3c:8b:d0:60:52:ac:fb:d8:0c:75:9b:90:23:69:db:28:4d:2c:39:6b:6d:84:63:81:af:cd:0c:d3

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2024q1.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2024q1
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2024q1.crl

Check the revocation status for certificate cosmopolitan.com

134

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cosmopolitan.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cosmopolitan.com
*.25ans.jp
*.altaonline.com
*.autoweek.com
*.bazaar.com
*.bestproducts.com
*.bicycling.com
*.bringatrailer.com
*.caranddriver.com
*.cdn.hearstapps.net
*.cosmopolitan.com
*.countryliving.com
*.crfashionbook.com
*.delish.com
*.dev.mediaos.hearst.io
*.drozthegoodlife.com
*.elle.com
*.elledecor.com
*.ellegirl.jp
*.esquire.com
*.fujingaho.jp
*.gearpatrol.com
*.ghsealapplication.com
*.goodhouse.com
*.goodhousekeeping.com
*.h-cdn.co
*.harpersbazaar.com
*.hdmtech.net
*.hdmtools.com
*.hearst.io
*.hearstapps.com
*.hearstapps.net
*.hearstdigitalstudios.com
*.hearstdigitalstudios.net
*.hearstlabs.com
*.hearstmags.com
*.housebeautiful.com
*.menshealth.com
*.myio.id
*.mylo.id
*.oprahdaily.com
*.oprahmag.com
*.popularmechanics.com
*.prevention.com
*.redbookmag.com
*.rnylo.com
*.rnylo.id
*.roadandtrack.com
*.rodalesorganiclife.com
*.rrylo.com
*.rrylo.id
*.runnersworld.com
*.s-w-e-e-t.com
*.seventeen.com
*.shondaland.com
*.thepioneerwoman.com
*.thepioneerwomancooks.com
*.todays-rewards.com
*.townandcountrymag.com
*.veranda.com
*.wearesweet.co
*.womansday.com
*.womenshealthmag.com
25ans.jp
altaonline.com
autoweek.com
bazaar.com
bestproducts.com
bicycling.com
bringatrailer.com
caranddriver.com
countryliving.com
crfashionbook.com
delish.com
drozthegoodlife.com
elle.com
elledecor.com
ellegirl.jp
esquire.com
fujingaho.jp
gearpatrol.com
ghsealapplication.com
goodhouse.com
goodhousekeeping.com
harpersbazaar.com
hdmtech.net
hearstlabs.com
housebeautiful.com
menshealth.com
myio.id
mylo.id
oprahdaily.com
oprahmag.com
popularmechanics.com
prevention.com
redbookmag.com
rnylo.com
rnylo.id
roadandtrack.com
rodalesorganiclife.com
rrylo.com
rrylo.id
runnersworld.com
s-w-e-e-t.com
seventeen.com
shondaland.com
thepioneerwoman.com
thepioneerwomancooks.com
todays-rewards.com
townandcountrymag.com
veranda.com
wearesweet.co
womansday.com
womenshealthmag.com
hearstlive.co.uk
*.menshealth.it
*.runnersworld.it
menshealth.it
runnersworld.it
*.modernliving.jp
modernliving.jp
*.firstfinds.com
firstfinds.com
*.biography.com
biography.com
*.nationalgeographic.nl
nationalgeographic.nl
*.menshealthtravel.com
menshealthtravel.com
www.biography.com
*.jumpstarttaggingsolutions.com
*.richessemag.jp
richessemag.jp
*.hearstmags.id

Other certificates including the domain name cosmopolitan.com

(limited to 100 certificates)
*.25ans.jp
dns-vetting1-mims-pawel.map.fastly.net
hearst-prod.actioniq.mr-in.com
dns-vetting1-mims-pawel.map.fastly.net
hearst-prod.actioniq.mr-in.com
dns-vetting1-mims-pawel.map.fastly.net
hearst-prod.actioniq.mr-in.com
shop.elle.com
sli.esquire.com
dns-vetting1-mims-pawel.map.fastly.net
cosmopolitan.com
mcstaging-shop.elle.com
hearst-prod.actioniq.mr-in.com
mcstaging-shop.elle.com
shop.elle.com
*.hearstapps.com
dns-vetting1-mims-pawel.map.fastly.net
dns-vetting1-mims-pawel.map.fastly.net
secure.hdmtools.com
dns-vetting1-mims-pawel.map.fastly.net
shop.elle.com
cosmopolitan.com
shop.elle.com
actieabonnement.live.hearst.aubergine-it.nl
actieabonnement.live.hearst.aubergine-it.nl
dns-vetting1-mims-pawel.map.fastly.net
store.caranddriver.com
dns-vetting1-mims-pawel.map.fastly.net
subscribe.hearstmags.com
sli.esquire.com
sli.esquire.com
mcstaging-shop.elle.com
shop.elle.com
dns-vetting1-mims-pawel.map.fastly.net
hearst-hdm.map.fastly.net
hearst-hdm.map.fastly.net
hearst-hdm.map.fastly.net
shop.cosmopolitan.com
shop.elle.com
dns-vetting1-mims-pawel.map.fastly.net
hearst-hdm.map.fastly.net
actieabonnement.live.hearst.aubergine-it.nl
sli.esquire.com
cosmopolitan.com
subscribe.hearstmags.com
dns-vetting1-mims-pawel.map.fastly.net
magentocloud55.map.fastly.net
subscribe.hearstmags.com
dns-vetting1-mims-pawel.map.fastly.net
subscribe.hearstmags.com
cosmopolitan.com
mcstaging-store.delish.com
shop.elle.com
shop.elle.com
hearst-prod.actioniq.mr-in.com
shop.elledecor.com
mcstaging-shop.elle.com
actieabonnement.live.hearst.aubergine-it.nl
mcstaging-shop.elle.com
dns-vetting1-mims-pawel.map.fastly.net
subscribe.hearstmags.com
sli.esquire.com
actieabonnement.live.hearst.aubergine-it.nl
shop.elle.com
hearst-hdm.map.fastly.net
subscribe.hearstmags.com
abonnement.bicycling.nl
actieabonnement.live.hearst.aubergine-it.nl
dns-vetting1-mims-pawel.map.fastly.net
mcstaging-store.delish.com
actieabonnement.live.hearst.aubergine-it.nl
cosmopolitan.com
store.caranddriver.com
dns-vetting1-mims-pawel.map.fastly.net
mcstaging-shop.elle.com
link.cosmopolitan.com
shop.elle.com
shop.elle.com
sli.esquire.com
dns-vetting1-mims-pawel.map.fastly.net
mcstaging-store.delish.com
hearst-hdm.map.fastly.net
subscribe.hearstmags.com
cosmopolitan.com
dns-vetting1-mims-pawel.map.fastly.net
mcstaging-shop.elle.com
mcstaging-shop.elle.com
dns-vetting1-mims-pawel.map.fastly.net
shop.elle.com
shop.elle.com
link.cosmopolitan.com
dns-vetting1-mims-pawel.map.fastly.net
hearst-hdm.map.fastly.net
sli.esquire.com
td.cosmopolitan.com
hearst-hdm.map.fastly.net
hearst-hdm.map.fastly.net
mcstaging-shop.elle.com
hearst-hdm.map.fastly.net
hearst-hdm.map.fastly.net

Certificate

The complete raw certificate details for cosmopolitan.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdDUxl8+Ds+VHdSzASWY
TSKmGdCQrKyu2EfUFc8lzEsd1zB7u9/wEYtyaLGcgmonAQHBVJrhj5i4gf7IokTO
lbC6vrSMuz0ADh4NexOwN7VNdunwB4sEKWLwfFx9rBaUauXaRKG61RVDTXsi1kym
/Suv4TODWQ19SIlcTClkycOsUZbrGwpJhw9eNx+N9P4Q6WAbQSwlGsWvzVHYH1qm
trKiEim+G08HVM0fmqKDR/srmrWLjoVbVXCgUQOSCmE+ZjKH8tfkQKCpADG/xP4R
g2rXClPI04fbp/nEklFok4zCexZoMMhnqeRrTvl0g1yYRnMTAaYRfdIebAM6O3k0
HwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1668486399046167444907892412125464932
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2024 Q1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-22 18:51:29 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-03-25 18:51:28 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'cosmopolitan.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21942205238198951390089137456468453259588837843802213776044364719617527313703528476514989502085337462085300426160813067384477960386067056836101492273806165097403349053612675407763891694018486061573743344561365571164846853950454521860734913372360589387389289883526231443301342074040120328015222496844616197099130524105746237489978725641921803897847245093473142631996525957252606867669469636146498362779425363012313847645247120735370300644265410693230570058535352306614572032972544372530198003883408192560700263943029879633375551576716269318855280378882262853824140606062790712330593123232321670123322125368228985779231
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2371 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cosmopolitan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.25ans.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.altaonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.autoweek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bazaar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bestproducts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bicycling.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bringatrailer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.caranddriver.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cdn.hearstapps.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cosmopolitan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.countryliving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.crfashionbook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.delish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.mediaos.hearst.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.drozthegoodlife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elledecor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ellegirl.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.esquire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fujingaho.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gearpatrol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ghsealapplication.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.goodhouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.goodhousekeeping.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.h-cdn.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.harpersbazaar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hdmtech.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hdmtools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hearst.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hearstapps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hearstapps.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hearstdigitalstudios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hearstdigitalstudios.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hearstlabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hearstmags.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.housebeautiful.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.menshealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myio.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mylo.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oprahdaily.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oprahmag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.popularmechanics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prevention.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.redbookmag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rnylo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rnylo.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.roadandtrack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rodalesorganiclife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rrylo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rrylo.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.runnersworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.s-w-e-e-t.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.seventeen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shondaland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thepioneerwoman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thepioneerwomancooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.todays-rewards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.townandcountrymag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.veranda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wearesweet.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.womansday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.womenshealthmag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '25ans.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'altaonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autoweek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bazaar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestproducts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bicycling.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bringatrailer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caranddriver.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'countryliving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crfashionbook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drozthegoodlife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elledecor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ellegirl.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esquire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fujingaho.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gearpatrol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ghsealapplication.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goodhouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goodhousekeeping.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harpersbazaar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hdmtech.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hearstlabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'housebeautiful.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'menshealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myio.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylo.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oprahdaily.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oprahmag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'popularmechanics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prevention.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redbookmag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rnylo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rnylo.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roadandtrack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rodalesorganiclife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rrylo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rrylo.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'runnersworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's-w-e-e-t.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seventeen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shondaland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thepioneerwoman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thepioneerwomancooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'todays-rewards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'townandcountrymag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'veranda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wearesweet.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'womansday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'womenshealthmag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hearstlive.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.menshealth.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.runnersworld.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'menshealth.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'runnersworld.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.modernliving.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'modernliving.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.firstfinds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firstfinds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.biography.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biography.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nationalgeographic.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nationalgeographic.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.menshealthtravel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'menshealthtravel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.biography.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jumpstarttaggingsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.richessemag.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'richessemag.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hearstmags.id'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0d4027072a0bd56b6a70566595fef772099d4294
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2024q1'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2024q1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 66c0c7a39acdfef3eace4b530b615eaf3305b3e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2024q1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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