qa-www.oxmoorhouse.com

- Time Inc. -

Issued by USERTrust Legacy Secure Server CA

About this certificate

This digital certificate with serial number 79:a4:a6:9d:96:1e:02:87:7d:74:46:db:47:0f:5f:14 was issued on by The USERTRUST Network.

With 25 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:

Time Inc.

Organization: Time Inc.
Organization unit: qa-www.oxmoorhouse.com:443
Organization unit: Hosted by Time Inc.
Organization unit: Unified Communications
Address: 1271 Avenue of the Americas
Postal code: 10020
State / Province: NY
Locality: New York
Country: US

The USERTRUST Network

Organization: The USERTRUST Network
State / Province: UT
Locality: Salt Lake City
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 79:a4:a6:9d:96:1e:02:87:7d:74:46:db:47:0f:5f:14
Serial Number (int): 161691503540049284461104576255709110036
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 6a:5a:c3:55:e3:30:7c:de:b1:47:57:3c:72:31:ec:19:79:0f:83:ef
AuthorityKeyId: af:a4:40:af:9f:16:fe:ab:31:fd:fb:d5:97:8b:f5:91:a3:24:86:16

Fingerprint (sha1): 49:a5:d4:e8:27:89:4d:65:89:67:f9:5b:f4:7d:89:2f:35:7a:03:5f
Fingerprint (sha256): 65:b4:0d:66:9e:df:7e:3e:59:19:83:e1:56:28:60:36:86:92:fb:3e:36:ee:6d:20:89:74:71:c5:7e:78:d8:85

Issuing Certificate URL: http://crt.usertrust.com/USERTrustLegacySecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.usertrust.com/USERTrustLegacySecureServerCA.crl

Check the revocation status for certificate qa-www.oxmoorhouse.com

25

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for qa-www.oxmoorhouse.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

qa-www.oxmoorhouse.com
qa-backissues.ew.com
qa-backissues.fortune.com
qa-backissues.money.com
qa-backissues.people.com
qa-backissues.realsimple.com
qa-backissues.si.com
qa-backissues.time.com
qa-cgi.timeinc.com
qa-special.magazinereadermall.com
qa-subscription.peopleenespanol.com
qa-subscription.sikids.com
qa-subscription.timeforkids.com
qa-www.employeenewsstand.timeinc.com
qa-www.fafnewsstand.timeinc.com
qa-www.magazinereadermall.com
qa-www.magazineselectstore.com
qa-www.mensjournalsubscriptions.com
qa-www.mysubscriptionstore.com
qa-www.officesubscriptions.com
qa-www.ohcustomerservice.com
qa-www.oxmoorpay.com
qa-www.partnernewsstand.timeinc.com
qa-www.rollingstonesubscriptions.com
qa-www.usweeklysubscriptions.com

Other certificates including the domain name oxmoorhouse.com

(limited to 100 certificates)
office.timeinc.com
subscription.timeinc.com
www.oxmoorhouse.com
office.timeinc.com
cgi.timeinc.com
qa-www.oxmoorhouse.com
tmpcaa.enterprise.corpad.timeinc.com
qa-www.oxmoorhouse.com
cmbuild-aws-www.oxmoorhouse.com
office.timeinc.com
www.oxmoorhouse.com
qa-www.oxmoorhouse.com
subscription.timeinc.com
subscription.timeinc.com
www.oxmoorhouse.com
smetrics.oxmoorhouse.com
www.oxmoorhouse.com
subscription.timeinc.com
qa-www.oxmoorhouse.com
subscription.timeinc.com
qa-www.oxmoorhouse.com
www.oxmoorhouse.com
oxmoorhouse.com
qa-www.oxmoorhouse.com
office.timeinc.com
qa-www.oxmoorhouse.com
subscription.timeinc.com
qa-www.oxmoorhouse.com
qa-www.oxmoorhouse.com
subscription.timeinc.com
www.oxmoorhouse.com
office.timeinc.com
qa-www.oxmoorhouse.com
qa-www.oxmoorhouse.com
www.oxmoorhouse.com
qa-www.oxmoorhouse.com
www.oxmoorhouse.com
cgi.timeinc.com
www.oxmoorhouse.com
office.timeinc.com
office.timeinc.com
qa-aws-www.oxmoorhouse.com
subscription.timeinc.com
office.timeinc.com
www.oxmoorhouse.com
qa-www.oxmoorhouse.com
aws-www.oxmoorhouse.com
office.timeinc.com
subscription.timeinc.com
cgi.timeinc.com
qa-www.oxmoorhouse.com
dev-aws-www.oxmoorhouse.com
subscription.timeinc.com
www.oxmoorhouse.com
secure.oxmoorhouse.com
qa-www.oxmoorhouse.com
office.timeinc.com
qa-www.oxmoorhouse.com
www.oxmoorhouse.com
www.oxmoorhouse.com
www.oxmoorhouse.com
www.oxmoorhouse.com
subscription.timeinc.com
office.timeinc.com
office.timeinc.com
qa-www.oxmoorhouse.com
qa-www.oxmoorhouse.com
subscription.timeinc.com
office.timeinc.com
www.oxmoorhouse.com
office.timeinc.com
www.oxmoorhouse.com
subscription.timeinc.com
www.oxmoorhouse.com
office.timeinc.com
qa-www.oxmoorhouse.com
subscription.timeinc.com
www.oxmoorhouse.com
qa-www.oxmoorhouse.com
office.timeinc.com
www.oxmoorhouse.com
office.timeinc.com
www.oxmoorhouse.com
subscription.timeinc.com
oxmoorhouse.com
qa-www.oxmoorhouse.com
smetrics.oxmoorhouse.com
qa-www.oxmoorhouse.com
qa-aws-www.oxmoorhouse.com

Certificate

The complete raw certificate details for qa-www.oxmoorhouse.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIIlzCCB3+gAwIBAgIQeaSmnZYeAod9dEbbRw9fFDANBgkqhkiG9w0BAQUFADB/
MQswCQYDVQQGEwJVUzELMAkGA1UECBMCVVQxFzAVBgNVBAcTDlNhbHQgTGFrZSBD
aXR5MR4wHAYDVQQKExVUaGUgVVNFUlRSVVNUIE5ldHdvcmsxKjAoBgNVBAMTIVVT
RVJUcnVzdCBMZWdhY3kgU2VjdXJlIFNlcnZlciBDQTAeFw0xMjA2MDYwMDAwMDBa
Fw0xNDA2MDYyMzU5NTlaMIH8MQswCQYDVQQGEwJVUzEOMAwGA1UEERMFMTAwMjAx
CzAJBgNVBAgTAk5ZMREwDwYDVQQHEwhOZXcgWW9yazEkMCIGA1UECRMbMTI3MSBB
dmVudWUgb2YgdGhlIEFtZXJpY2FzMRIwEAYDVQQKEwlUaW1lIEluYy4xIzAhBgNV
BAsTGnFhLXd3dy5veG1vb3Job3VzZS5jb206NDQzMRwwGgYDVQQLExNIb3N0ZWQg
YnkgVGltZSBJbmMuMR8wHQYDVQQLExZVbmlmaWVkIENvbW11bmljYXRpb25zMR8w
HQYDVQQDExZxYS13d3cub3htb29yaG91c2UuY29tMIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEA0IyIpEANehMCGW7YKVZQmrjoK3f1Hvp3EIIsHEDsbYws
NLdkMHwUpUhuG2TvfL8+FFskmv8RiG+8TumeMUKa3kPmpxrXYTKxhaHpHyA/d3C+
K/Jfl9dy2pTmNwj+pvBGALloKlQqCrX5ArJrFwRimt0sDjZjATDl6876YubN9jjB
+m+RnO6DlEzv0/Ny3kMgW5oEODy/8wJSnpUYgHp7BtuOd0VFkp4bTCHnCkvEWMeb
VELC0cpILwmCphWPrr441inzCrx1uvyTXkrOKp+U4IsQ6d/JO8yrxTzRMeoP7iFu
VDvW147/L1b/vQvUYTx3mQSg5rn+DUJEVuOdF6d7DQIDAQABo4IEjzCCBIswHwYD
VR0jBBgwFoAUr6RAr58W/qsx/fvVl4v1kaMkhhYwHQYDVR0OBBYEFGpaw1XjMHze
sUdXPHIx7Bl5D4PvMA4GA1UdDwEB/wQEAwIFoDAMBgNVHRMBAf8EAjAAMB0GA1Ud
JQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjBCBgNVHSAEOzA5MDcGDCsGAQQBsjEB
AgEDBDAnMCUGCCsGAQUFBwIBFhlodHRwczovL2Nwcy51c2VydHJ1c3QuY29tMEsG
A1UdHwREMEIwQKA+oDyGOmh0dHA6Ly9jcmwudXNlcnRydXN0LmNvbS9VU0VSVHJ1
c3RMZWdhY3lTZWN1cmVTZXJ2ZXJDQS5jcmwwfQYIKwYBBQUHAQEEcTBvMEYGCCsG
AQUFBzAChjpodHRwOi8vY3J0LnVzZXJ0cnVzdC5jb20vVVNFUlRydXN0TGVnYWN5
U2VjdXJlU2VydmVyQ0EuY3J0MCUGCCsGAQUFBzABhhlodHRwOi8vb2NzcC51c2Vy
dHJ1c3QuY29tMIIC+gYDVR0RBIIC8TCCAu2CFnFhLXd3dy5veG1vb3Job3VzZS5j
b22CFHFhLWJhY2tpc3N1ZXMuZXcuY29tghlxYS1iYWNraXNzdWVzLmZvcnR1bmUu
Y29tghdxYS1iYWNraXNzdWVzLm1vbmV5LmNvbYIYcWEtYmFja2lzc3Vlcy5wZW9w
bGUuY29tghxxYS1iYWNraXNzdWVzLnJlYWxzaW1wbGUuY29tghRxYS1iYWNraXNz
dWVzLnNpLmNvbYIWcWEtYmFja2lzc3Vlcy50aW1lLmNvbYIScWEtY2dpLnRpbWVp
bmMuY29tgiFxYS1zcGVjaWFsLm1hZ2F6aW5lcmVhZGVybWFsbC5jb22CI3FhLXN1
YnNjcmlwdGlvbi5wZW9wbGVlbmVzcGFub2wuY29tghpxYS1zdWJzY3JpcHRpb24u
c2lraWRzLmNvbYIfcWEtc3Vic2NyaXB0aW9uLnRpbWVmb3JraWRzLmNvbYIkcWEt
d3d3LmVtcGxveWVlbmV3c3N0YW5kLnRpbWVpbmMuY29tgh9xYS13d3cuZmFmbmV3
c3N0YW5kLnRpbWVpbmMuY29tgh1xYS13d3cubWFnYXppbmVyZWFkZXJtYWxsLmNv
bYIecWEtd3d3Lm1hZ2F6aW5lc2VsZWN0c3RvcmUuY29tgiNxYS13d3cubWVuc2pv
dXJuYWxzdWJzY3JpcHRpb25zLmNvbYIecWEtd3d3Lm15c3Vic2NyaXB0aW9uc3Rv
cmUuY29tgh5xYS13d3cub2ZmaWNlc3Vic2NyaXB0aW9ucy5jb22CHHFhLXd3dy5v
aGN1c3RvbWVyc2VydmljZS5jb22CFHFhLXd3dy5veG1vb3JwYXkuY29tgiNxYS13
d3cucGFydG5lcm5ld3NzdGFuZC50aW1laW5jLmNvbYIkcWEtd3d3LnJvbGxpbmdz
dG9uZXN1YnNjcmlwdGlvbnMuY29tgiBxYS13d3cudXN3ZWVrbHlzdWJzY3JpcHRp
b25zLmNvbTANBgkqhkiG9w0BAQUFAAOCAQEANiPnar7LuMLCoifQpA6BHliPO1Au
4qOhcVuqw/gbXo3QdJufHB8kT4tadU1Zxc9qFRpRNkxW1kuM6wy2EUtc4xXiVOhR
wSeORdDeYZYf3x5gYoM5T7f+IokV4yJverUPu6rmiAqkvZGrTVCJqm2B0z6YqJ3j
lSzInEMxtpiJHUm547U9iOsUMne3PvingEFYZWMKu4mOEVATMXducS5gI9q4B2w6
II/mf5E9N8aLDoEalYcBdEfRfGkQWjLbiPkZ1rRhBn6SAyL+CQQ0DiCdJMSBjv5P
qicog/BRM+KIzjNpfnhC2cuG+g6Wp7TxardMCUX53NdsqjcjtQ0jhOBI4A==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0IyIpEANehMCGW7YKVZQ
mrjoK3f1Hvp3EIIsHEDsbYwsNLdkMHwUpUhuG2TvfL8+FFskmv8RiG+8TumeMUKa
3kPmpxrXYTKxhaHpHyA/d3C+K/Jfl9dy2pTmNwj+pvBGALloKlQqCrX5ArJrFwRi
mt0sDjZjATDl6876YubN9jjB+m+RnO6DlEzv0/Ny3kMgW5oEODy/8wJSnpUYgHp7
BtuOd0VFkp4bTCHnCkvEWMebVELC0cpILwmCphWPrr441inzCrx1uvyTXkrOKp+U
4IsQ6d/JO8yrxTzRMeoP7iFuVDvW147/L1b/vQvUYTx3mQSg5rn+DUJEVuOdF6d7
DQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 161691503540049284461104576255709110036
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'UT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salt Lake City'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'The USERTRUST Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'USERTrust Legacy Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2012-06-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-06-06 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '10020'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NY'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '1271 Avenue of the Americas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Time Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'qa-www.oxmoorhouse.com:443'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hosted by Time Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Unified Communications'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'qa-www.oxmoorhouse.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26326867210989724127247807800217667408435453333529101354862798923989351157538992905738773507193133940893487843919670778968868728154708508663266536278582990280757940402974940267407259493321008772591995826879859595763902073221594143005597509598441742015291411993670085179152573077924308956804929245207995447934472262469159202114734293158022898092036980032921578540221540821158839487575453838968642671202294134718237137968839765485637777587344900837339594656121998636211311885682654610391060291587694246972953941599006651568443284530246924705656306053523674049717067522374095637656007583823690524259332995334649802095373
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName afa440af9f16feab31fdfbd5978bf591a3248616
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6a5ac355e3307cdeb147573c7231ec19790f83ef
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://cps.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.usertrust.com/USERTrustLegacySecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (113 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/USERTrustLegacySecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (753 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-www.oxmoorhouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-backissues.ew.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-backissues.fortune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-backissues.money.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-backissues.people.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-backissues.realsimple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-backissues.si.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-backissues.time.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-cgi.timeinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-special.magazinereadermall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-subscription.peopleenespanol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-subscription.sikids.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-subscription.timeforkids.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-www.employeenewsstand.timeinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-www.fafnewsstand.timeinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-www.magazinereadermall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-www.magazineselectstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-www.mensjournalsubscriptions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-www.mysubscriptionstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-www.officesubscriptions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-www.ohcustomerservice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-www.oxmoorpay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-www.partnernewsstand.timeinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-www.rollingstonesubscriptions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-www.usweeklysubscriptions.com'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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