hearst.co.uk

Issued by GlobalSign Atlas R3 DV TLS CA 2022 Q4

About this certificate

This digital certificate with serial number 01:e6:89:50:5a:c2:ad:2b:cb:48:64:c0:56:22:6e:ff was issued on by GlobalSign nv-sa.

With 124 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=hearst.co.uk

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 01:e6:89:50:5a:c2:ad:2b:cb:48:64:c0:56:22:6e:ff
Serial Number (int): 2526241329705627917646803901463293695
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: da:64:27:34:e9:0a:22:35:d3:e1:ec:48:b6:57:06:05:8d:9b:60:d1
AuthorityKeyId: 88:68:d9:1f:11:c4:0e:1f:9b:89:e0:a0:42:77:5f:c3:79:8e:c3:6e

Fingerprint (sha1): 41:ec:e9:e8:95:b0:7f:02:4a:91:79:4a:24:ab:69:36:18:06:7a:5e
Fingerprint (sha256): 64:02:49:1b:63:4f:84:6e:56:d4:4f:84:24:e8:16:ab:fc:44:8f:83:96:3e:d6:cb:d7:43:c8:1d:a6:a5:98:7c

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2022q4.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q4
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2022q4.crl

Check the revocation status for certificate hearst.co.uk

124

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for hearst.co.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

hearst.co.uk
*.asdagoodliving.co.uk
*.bazaarartweek.co.uk
*.bazaaratwork.co.uk
*.bazaarsummit.co.uk
*.bicycling.nl
*.blogs.elle.es
*.caranddriver.es
*.cdnds.net
*.cosmopolitan.co.uk
*.cosmopolitan.it
*.countryliving.co.uk
*.countrylivingshop.co.uk
*.crecerfeliz.es
*.delish.co.uk
*.diezminutos.es
*.digitalspy.co.uk
*.digitalspy.com
*.elle.co.jp
*.elle.it
*.ellebeautyawards.it
*.elledecor.it
*.elledecoration.co.uk
*.elleuk.com
*.esquire.co.uk
*.financiallyfabulous.co.uk
*.fotogramas.es
*.gioia.it
*.goodhousekeeping.co.uk
*.harpersbazaar.co.uk
*.harpersbazaar.jp
*.hdigital.net
*.hearst.co.uk
*.hearst.it
*.hearstcontentagency.co.uk
*.hearstcontentagency.com
*.hearstgames.com
*.hearstgames.net
*.hearstglobalsolutions.com
*.hearstmagazinesdirect.co.uk
*.housebeautiful.co.uk
*.jan-magazine.nl
*.marieclaire.it
*.menshealth.co.uk
*.menshealth.es
*.menshealth.nl
*.micasarevista.com
*.netdoctor.co.uk
*.prima.co.uk
*.princess.hdigital.net
*.princessjourney.co.uk
*.quemedices.es
*.quest.nl
*.quotenet.nl
*.redonline.co.uk
*.runnersweb.nl
*.runnersworld.co.uk
*.salonqp.com
*.townandcountrymag.co.uk
*.womenshealth.es
*.womenshealthlive.co.uk
*.womenshealthmag.co.uk
*.womenshealthmag.nl
asdagoodliving.co.uk
bazaarartweek.co.uk
bazaaratwork.co.uk
bazaarsummit.co.uk
bicycling.nl
blogs.elle.es
caranddriver.es
cosmopolitan.it
countryliving.co.uk
countrylivingshop.co.uk
crecerfeliz.es
delish.co.uk
diezminutos.es
digitalspy.co.uk
digitalspy.com
elle.co.jp
elle.it
ellebeautyawards.it
elledecor.it
elledecoration.co.uk
elleuk.com
esquire.co.uk
financiallyfabulous.co.uk
fotogramas.es
gioia.it
goodhousekeeping.co.uk
harpersbazaar.co.uk
harpersbazaar.jp
hearst.it
hearstcontentagency.co.uk
hearstcontentagency.com
hearstglobal.com
hearstglobalsolutions.com
hearstmagazinesdirect.co.uk
housebeautiful.co.uk
insidesoap.co.uk
jan-magazine.nl
marieclaire.it
menshealth.co.uk
menshealth.es
menshealth.nl
micasarevista.com
netdoctor.co.uk
prima.co.uk
princessjourney.co.uk
quemedices.es
quest.nl
quotenet.nl
redonline.co.uk
runnersweb.nl
runnersworld.co.uk
salonqp.com
townandcountrymag.co.uk
womenshealth.es
womenshealthlive.co.uk
womenshealthmag.co.uk
womenshealthmag.nl
*.hearst.es
hearst.es
*.hearstmagazine.co.uk
hearstmagazine.co.uk

Other certificates including the domain name hearst.co.uk

(limited to 100 certificates)
dns-vetting1h.map.fastly.net
dns-vetting1g.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
dns-vetting1g.map.fastly.net
*.hearst.co.uk
hearst-uk.map.fastly.net
dns-vetting1g.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
dns-vetting1g.map.fastly.net
dns-vetting1g.map.fastly.net
hearst-uk.map.fastly.net
dns-vetting1h.map.fastly.net
*.hearst.co.uk
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
*.hearst.co.uk
dns-vetting1g.map.fastly.net
dns-vetting1g.map.fastly.net
dns-vetting1g.map.fastly.net
mail.hearst.co.uk
dns-vetting1g.map.fastly.net
dns-vetting1g.map.fastly.net
dns-vetting1g.map.fastly.net
hearst-uk.map.fastly.net
dns-vetting1g.map.fastly.net
dns-vetting1h.map.fastly.net
dns-vetting1h.map.fastly.net
dns-vetting1g.map.fastly.net
dns-vetting1g.map.fastly.net
hearst.co.uk
dns-vetting1g.map.fastly.net
hearst-uk.map.fastly.net
RVZIFEPOOL.resource.hearstcorp.com
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
careers.hearst.co.uk
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
dns-vetting1h.map.fastly.net
hearst-uk.map.fastly.net
dns-vetting1g.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
remotemail.hearst.com
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
philipsbodylove.hearst.co.uk
hearst-uk.map.fastly.net
dns-vetting1g.map.fastly.net
hearst-uk.map.fastly.net
*.hearst.co.uk
careers.hearst.co.uk
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
dns-vetting1g.map.fastly.net
dns-vetting1g.map.fastly.net
careers.hearst.co.uk
hearst-uk.map.fastly.net
dns-vetting1g.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
dns-vetting1g.map.fastly.net
hearst-uk.map.fastly.net
*.hearst.co.uk
dns-vetting1g.map.fastly.net
hearst-uk.map.fastly.net
dns-vetting1g.map.fastly.net
dns-vetting1h.map.fastly.net
*.hearst.co.uk
hearst-uk.map.fastly.net
dns-vetting1h.map.fastly.net
dns-vetting1g.map.fastly.net
hearst-uk.map.fastly.net
dns-vetting1h.map.fastly.net
hearst-uk.map.fastly.net
dns-vetting1h.map.fastly.net
hearst-uk.map.fastly.net
hearst-uk.map.fastly.net
dns-vetting1g.map.fastly.net
hearst-uk.map.fastly.net
dns-vetting1h.map.fastly.net
dns-vetting1g.map.fastly.net
dns-vetting1g.map.fastly.net
dns-vetting1g.map.fastly.net
dns-vetting1g.map.fastly.net

Certificate

The complete raw certificate details for hearst.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqztho+35fgq/ow0UR20s
03TrchYVbWMunZiKvgX73YoeFm4UzXsLGjrBjuBcQMG6svWEauzUiusSJ4cizbH0
nTElqF2Sa5ABw76WLqQ8P0OlihQ0Zfl94jB5ngu556NTfjXC3ciTXJ9JHaVVIAVd
jF5xNTnjT3YldcoD5bRW9apiPbGb3hqej+O3S7Odgk2OwI1pQ2+ukycsyrR/wp90
+gccagEusvygFGZy/vglsytaLbYsRzUsQQaXl32N2UenL9B0slyQYt+QXEiTFfd2
jLpHDOHRAU1OFVvGvaMR0YbrBjQ0rhZI/s2ssxC8L3pWuUwbmI4ic/n6j2gIFpMW
qwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2526241329705627917646803901463293695
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2022 Q4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-19 11:32:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-20 11:32:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'hearst.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21616032212649421379183267397179657255582087789970047832756145463367814351205087679586917196194844818402800732870454720858111672240728593520709828040813600069917490750726059086006419883719854352201639875558583266093119178504884781408719665385536404317886928492144797490609700743149353531571612236688872009735535845078008931355956094351203236731928883289326812191586556839582863466660034439782572048704627311872104216905979215281321738426197249750145617202997827828710360512291260228369670637300342618571448825269085299960288106617588549872084377450610885950509782539940896149115050045157149851123869606669501118748331
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2360 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hearst.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.asdagoodliving.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bazaarartweek.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bazaaratwork.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bazaarsummit.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bicycling.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blogs.elle.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.caranddriver.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cdnds.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cosmopolitan.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cosmopolitan.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.countryliving.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.countrylivingshop.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.crecerfeliz.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.delish.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.diezminutos.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.digitalspy.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.digitalspy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elle.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elle.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ellebeautyawards.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elledecor.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elledecoration.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elleuk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.esquire.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.financiallyfabulous.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fotogramas.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gioia.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.goodhousekeeping.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.harpersbazaar.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.harpersbazaar.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hdigital.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hearst.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hearst.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hearstcontentagency.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hearstcontentagency.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hearstgames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hearstgames.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hearstglobalsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hearstmagazinesdirect.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.housebeautiful.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jan-magazine.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.marieclaire.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.menshealth.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.menshealth.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.menshealth.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.micasarevista.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.netdoctor.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prima.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.princess.hdigital.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.princessjourney.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.quemedices.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.quest.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.quotenet.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.redonline.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.runnersweb.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.runnersworld.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.salonqp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.townandcountrymag.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.womenshealth.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.womenshealthlive.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.womenshealthmag.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.womenshealthmag.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asdagoodliving.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bazaarartweek.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bazaaratwork.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bazaarsummit.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bicycling.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blogs.elle.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caranddriver.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cosmopolitan.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'countryliving.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'countrylivingshop.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crecerfeliz.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delish.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diezminutos.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalspy.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalspy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elle.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elle.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ellebeautyawards.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elledecor.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elledecoration.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elleuk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esquire.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'financiallyfabulous.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fotogramas.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gioia.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goodhousekeeping.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harpersbazaar.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harpersbazaar.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hearst.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hearstcontentagency.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hearstcontentagency.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hearstglobal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hearstglobalsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hearstmagazinesdirect.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'housebeautiful.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insidesoap.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jan-magazine.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marieclaire.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'menshealth.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'menshealth.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'menshealth.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'micasarevista.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netdoctor.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prima.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'princessjourney.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quemedices.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quest.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quotenet.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redonline.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'runnersweb.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'runnersworld.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salonqp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'townandcountrymag.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'womenshealth.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'womenshealthlive.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'womenshealthmag.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'womenshealthmag.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hearst.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hearst.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hearstmagazine.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hearstmagazine.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							da642734e90a2235d3e1ec48b65706058d9b60d1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q4'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2022q4.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8868d91f11c40e1f9b89e0a042775fc3798ec36e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2022q4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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