secure-api.scrippsnetworks.com

- Scripps Networks LLC -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 0c:dd:36:d4:d9:d2:69:ad:30:d9:e5:a7:68:ee:e4:8f was issued on by DigiCert Inc.

With 88 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Scripps Networks LLC

Organization: Scripps Networks LLC
Organization unit: Akamai SAN SSL OV
State / Province: Tennessee
Locality: Knoxville
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:dd:36:d4:d9:d2:69:ad:30:d9:e5:a7:68:ee:e4:8f
Serial Number (int): 17099345669056858191631862590423884943
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 13:b7:95:5f:4a:50:b1:5c:3d:34:b0:ea:ab:a8:9c:f3:31:b6:b3:6d
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): 89:ce:3c:9b:4e:42:9d:2e:39:f0:29:8d:dd:66:05:db:80:2a:00:b6
Fingerprint (sha256): 69:78:36:35:40:54:7d:12:e8:15:29:1d:c6:7f:60:43:2d:96:76:49:34:28:9a:33:65:ae:d0:88:3b:9b:b9:c2

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate secure-api.scrippsnetworks.com

88

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for secure-api.scrippsnetworks.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

secure-api.scrippsnetworks.com
click.fnr.sndimg.com
blue.foodnetwork.com
pictures.foodnetwork.com
img-nonprod.sndimg.com
cook.fnr.sndimg.com
beta.hgtv.com
discovery.sndimg.com
www.cookingchanneltv.com
img.food.com
api.foodnetworkinteractive.com
pictures.travelchannel.com
secure-api.foodnetwork.com
beta-api.foodnetwork.com
pictures.cookingchanneltv.com
food.sndimg.com
watch.foodnetwork.com
statics.scrippsnetworks.com
photos.hgtv.com
beta.diynetwork.com
watch.hgtv.com
travel.fnr.sndimg.com
pictures.diynetwork.com
img.sndimg.com
food.com
www.qa-food.com
www.greatamericancountry.com
www.travelchannel.loadtest.sni.hgtv.com
tlc.sndimg.com
www.hgtvremodels.com
click.home.sndimg.com
qa-geniuskitchen.sndimg.com
watch.cookingchanneltv.com
travel.tc.sndimg.com
watch.qa-geniuskitchen.com
pictures.gactv.com
people.greatamericancountry.com
www.dev-geniuskitchen.com
img.qa1-food.com
www.discovery.com
www.tlcme.com
www.sndimg.com
www.diynetwork.com
www.travelchannel.com
people.diynetwork.com
statics.stage-scrippsnetworks.com
hgtvhome.sndimg.com
pictures.hgtv.com
failover5xx.diynetwork.com
secure-api.hgtv.com
watch.geniuskitchen.com
geniuskitchen.sndimg.com
qa-food.com
qa-geniuskitchen.com
failover5xx.greatamericancountry.com
beta-api.scrippsnetworks.com
investigationdiscovery.sndimg.com
home.loadtest.home.sndimg.com
qa1-food.sndimg.com
videos.hgtv.com
beta-api.food.com
kitchen.foodnetwork.com
secure-api.diynetwork.com
geniuskitchen.com
www.stage-foodnetwork.com
gac.sndimg.com
dev-geniuskitchen.com
watch.diynetwork.com
people.hgtv.com
images.scrippsnetworks.com
failover5xx.hgtv.com
travel.home.sndimg.com
diy.sndimg.com
qa.fnkweb.sni.foodnetwork.com
www.foodnetwork.com
pictures.food.com
www.qa1-foodnetwork.com
www.geniuskitchen.com
watch.travelchannel.com
dev-geniuskitchen.sndimg.com
beta.greatamericancountry.com
www.hgtv.com
www.chromecast.video.snidigital.com
www.food.com
travel.loadtest.home.sndimg.com
www.qa-geniuskitchen.com
food.fnr.sndimg.com
secure-api.food.com

Other certificates including the domain name scrippsnetworks.com

(limited to 100 certificates)
peoplesoftdemo-ren.scrippsnetworks.com
mamcloud-int.scrippsnetworks.com
secure-api.scrippsnetworks.com
connect2vpn.scrippsnetworks.com
secure-api.scrippsnetworks.com
mediapulse.scrippsnetworks.com
san-6-s13.tlsprovisioning.exacttarget.com
mysite.insidesni.com
orders.scrippsnetworks.com
mam.scrippsnetworks.com
idmanager.scrippsnetworks.com
vpntest.scrippsnetworks.com
mysecure.qa2-cookingchanneltv.com
snkxs078.scrippsnetworks.com
myscripps.scrippsnetworks.com
jsseng.scrippsnetworks.com
secure-api.scrippsnetworks.com
mynewsletters.scrippsnetworks.com
san-6-s13.tlsprovisioning.exacttarget.com
securestatics.scrippsnetworks.com
*.scrippsnetworks.com
timereporting.scrippsnetworks.com
orders.scrippsnetworks.com
jssadmin.scrippsnetworks.com
sniidevices.scrippsnetworks.com
secure-api.scrippsnetworks.com
sales.scrippsnetworks.com
secure-api.scrippsnetworks.com
mamcloud-dev.scrippsnetworks.com
mynewsletters.discovery.com
alfintlqa2.scrippsnetworks.com
mam.scrippsnetworks.com
boecloud-qa.scrippsnetworks.com
snkxvoip-expe-cluster01.scrippsnetworks.com
secure-api.scrippsnetworks.com
secure-api.scrippsnetworks.com
secure-api.scrippsnetworks.com
mysecure.dev-travelchannel.com
secure-api.scrippsnetworks.com
audit.scrippsnetworks.com
secure-api.scrippsnetworks.com
fgs-qa.scrippsnetworks.com
faspexglobal.scrippsnetworks.com
peoplesoftdev-ren.scrippsnetworks.com
*.scrippsnetworks.com
faspex.scrippsnetworks.com
dev-apps.scrippsnetworks.com
sarbox404.scrippsnetworks.com
mynewsletters.discovery.com
sniforms.scrippsnetworks.com
sniforms.scrippsnetworks.com
mamcloud-int.scrippsnetworks.com
qa2-mysecure.scrippsnetworks.com
*.scrippsnetworks.com
idam.scrippsnetworks.com
hrapprovals.scrippsnetworks.com
orders.scrippsnetworks.com
orders.scrippsnetworks.com
fgs-int.scrippsnetworks.com
mediapulse.scrippsnetworks.com
mamcloud-dev.scrippsnetworks.com
doa.scrippsnetworks.com
mysecure.staging-foodnetwork.com
partnerweb.scrippsnetworks.com
pressreleases.scrippsnetworks.com
secure-api.scrippsnetworks.com
orders.scrippsnetworks.com
recognitionprograms.scrippsnetworks.com
vpntest.scrippsnetworks.com
snkxvoip-expc-cluster01.scrippsnetworks.com
qa1-moderation.scrippsnetworks.com
slate.scrippsnetworks.com
wiki.scrippsnetworks.com
san-6-s13.tlsprovisioning.exacttarget.com
snkxvoip-expe02.scrippsnetworks.com
mamcloud.scrippsnetworks.com
statics2.scrippsnetworks.com
jsseng.scrippsnetworks.com
sniidevices.scrippsnetworks.com
secure-api.scrippsnetworks.com
snkxise01-admin.scrippsnetworks.com
hmp.scrippsnetworks.com
apimami.scrippsnetworks.com
snkxvoip-expe-cluster01.scrippsnetworks.com
partner.scrippsnetworks.com
alfdomuat.scrippsnetworks.com
peoplesoftdemo-ren.scrippsnetworks.com
tableaucloud.scrippsnetworks.com
secure-api.scrippsnetworks.com
archerweb-uat.scrippsnetworks.com
secure-api.scrippsnetworks.com
adsremote.scrippsnetworks.com
*.scrippsnetworks.com
sarbox404.scrippsnetworks.com
peoplesoftdev2.scrippsnetworks.com
boecloud.scrippsnetworks.com
scrippsnetworks.com
mysecure.scrippsnetworks.com
connect2vpnc.scrippsnetworks.com
secure-api.scrippsnetworks.com

Certificate

The complete raw certificate details for secure-api.scrippsnetworks.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvD7d59TiV5uvIdvBjifi
NPunyH9mIRQZ6QORwsBYqPYdS0P9BdMUjXYqQdhf+7PE5I8Kl5u3x6HuFhL7htHO
sr8+lnYDs1Mlw8e3Ae9GnzOaRz4rY1dHPdjLpmaxZaeq/co+qjKYIhPUjdl5cDcU
9CA0owW+XpbzV7GSmY4N6eC4wk86kp4rZjjgaMRX2WvH6JDr7ezE7AKDdjFhssU6
gO4T2MFxVhnwIahBZtYdXpvD36FKyI8yBV5+NnxQ9OoN0aumncPJ4R+780G0zFDB
VQxV4nNVtyqYRl7NswP9GcRzgizsO/CwyON+xyFL4BphoOm7KlB4D/h9R+rbufVo
oQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17099345669056858191631862590423884943
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-27 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-19 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Tennessee'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Knoxville'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scripps Networks LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Akamai SAN SSL OV'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'secure-api.scrippsnetworks.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23763802117344469938575393514986810150875472198334110611151781422645886055614256440975299729021020520906789760590674352120301219647525482696086396385304646068821221360907271831235904968523972781086369803518129751642030019704655145461717598409529081261691148086843745201285280172113482935805581618921203988515251855439406991119244647944077013986472415307145242441153622668576188756166111402472489343882260540536045526497915066375357245266632613154667257333745421412517922517984597609781133584803405332646065716728136876413505258166861088217999875685402086232983398984446803204106805751902936991551577081637051651418273
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							13b7955f4a50b15c3d34b0eaaba89cf331b6b36d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2078 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure-api.scrippsnetworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'click.fnr.sndimg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blue.foodnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pictures.foodnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'img-nonprod.sndimg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cook.fnr.sndimg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.hgtv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'discovery.sndimg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cookingchanneltv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'img.food.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.foodnetworkinteractive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pictures.travelchannel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure-api.foodnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta-api.foodnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pictures.cookingchanneltv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'food.sndimg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watch.foodnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'statics.scrippsnetworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'photos.hgtv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.diynetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watch.hgtv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'travel.fnr.sndimg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pictures.diynetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'img.sndimg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'food.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qa-food.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greatamericancountry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.travelchannel.loadtest.sni.hgtv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tlc.sndimg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hgtvremodels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'click.home.sndimg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-geniuskitchen.sndimg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watch.cookingchanneltv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'travel.tc.sndimg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watch.qa-geniuskitchen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pictures.gactv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'people.greatamericancountry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dev-geniuskitchen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'img.qa1-food.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.discovery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tlcme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sndimg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diynetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.travelchannel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'people.diynetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'statics.stage-scrippsnetworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hgtvhome.sndimg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pictures.hgtv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'failover5xx.diynetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure-api.hgtv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watch.geniuskitchen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geniuskitchen.sndimg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-food.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-geniuskitchen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'failover5xx.greatamericancountry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta-api.scrippsnetworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investigationdiscovery.sndimg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'home.loadtest.home.sndimg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa1-food.sndimg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'videos.hgtv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta-api.food.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kitchen.foodnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure-api.diynetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geniuskitchen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stage-foodnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gac.sndimg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-geniuskitchen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watch.diynetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'people.hgtv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.scrippsnetworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'failover5xx.hgtv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'travel.home.sndimg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diy.sndimg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.fnkweb.sni.foodnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foodnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pictures.food.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qa1-foodnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.geniuskitchen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watch.travelchannel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-geniuskitchen.sndimg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.greatamericancountry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hgtv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chromecast.video.snidigital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.food.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'travel.loadtest.home.sndimg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qa-geniuskitchen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'food.fnr.sndimg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure-api.food.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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