*.secure.meredith.com

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 09:64:96:40:1a:ac:d3:34:a2:86:c2:66:37:78:95:92 was issued on by Amazon.

With 33 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=*.secure.meredith.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 09:64:96:40:1a:ac:d3:34:a2:86:c2:66:37:78:95:92
Serial Number (int): 12485329088216217169067038208178034066
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 7c:9a:8e:93:7e:b9:a5:67:b3:b7:2e:e1:56:f7:91:e4:2b:78:dd:f6
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 9b:f5:11:43:c7:ee:ad:5c:71:26:5d:d5:69:a2:9c:3e:9b:fc:67:f9
Fingerprint (sha256): 70:00:89:b0:89:e9:07:1e:82:5e:d8:92:c0:fe:3f:36:0b:45:52:0c:7b:4e:ad:e1:11:3e:26:9a:5f:24:c3:6d

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate *.secure.meredith.com

33

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.secure.meredith.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.secure.meredith.com
*.secure.child.com
*.secure.diabeticlivingonline.com
*.secure.fitnessmagazine.com
*.secure.magazine.store
*.secure.recipe.com
*.secure.divinecaroline.com
*.secure.midwestliving.com
*.secure.health.com
*.secure.allpeoplequilt.com
*.secure.parenting.com
*.secure.lhj.com
*.secure.fitpregnancy.com
*.secure.familycircle.com
*.secure.traditionalhome.com
*.secure.marthastewart.com
*.secure.woodmagazine.com
*.secure.marthastewartweddings.com
*.secure.ew.com
*.secure.entertainmentweekly.com
*.meredithcsa.com
*.cr-iframe.magazine.store
*.secure.travelandleisure.com
*.secure.parents.com
*.secure.bhg.com
*.secure.agriculture.com
*.secure.allrecipesmagazine.com
*.secure.livingthecountrylife.com
*.secure.shape.com
*.secure.travelmeredith.com
*.secure.eatingwell.com
*.secure.peopleenespanol.com
*.secure.mdp.allrecipes.com

Other certificates including the domain name meredith.com

(limited to 100 certificates)
wpm.ccmp.eu
payments.meredith.com
vcacontent.meredith.com
secure.meredith.com
dyncat.cip.meredith.com
*.meredith.com
secure.static.meredith.com
*.secure.meredith.com
secure.meredith.com
matrixdev.meredith.com
meredith.com
*.meredith.com
my.meredith.com
test.secure.static.meredith.com
meredith.com
images.meredith.com
citrix.meredith.com
wpm03.eccmp.com
*.meredith.com
5713573250596864-fe4.pantheonsite.io
images.meredith.com
munkireport.meredith.com
payments.meredith.com
meredith.com
woodwing.meredith.com
secure.static.meredith.com
*.meredith.com
es.meredith.com
*.woodwing.meredith.com
kptvoasis.meredith.com
www.meredith.com
webmail.meredith.com
wpm.ccmp.eu
specialoffers.meredith.com
splunk.meredith.com
secure.static.meredith.com
wpm03.eccmp.com
intranet.meredith.com
akamai-san192.exacttarget.com
secure.meredith.com
wpm.ccmp.eu
*.meredith.com
360.meredith.com
wpm.ccmp.eu
*.images.meredith.com
quizler.meredith.com
chrysler-stg.meredith.com
Dashboards.meredith.com
*.agriculture.com
dev.app.meredith.com
adobefrl.meredith.com
collabedge.meredith.com
go.meredith.com
dev.secure.meredith.com
*.meredith.com
5713573250596864-fe4.pantheonsite.io
*.meredith.com
*.meredith.com
360-auth.meredith.com
wpm03.eccmp.com
*.meredith.com
images.qa.shopnation.com
ise.meredith.com
wpm.ccmp.eu
secure.static.meredith.com
secure.meredith.com
images.meredith.com
assets.meredith.com
*.elvis.meredith.com
accounts.bhg.com
accounts.bhg.com
*.meredith.com
*.meredith.com
LCS.MEREDITH.COM
5713573250596864-fe4.pantheonsite.io
5713573250596864-fe4.pantheonsite.io
wpm03.eccmp.com
*.elvis.meredith.com
origin-secure.meredith.com
secure.meredith.com
mywedding.com
origin-dev.secure.meredith.com
secure.meredith.com
admin-dev.meredith.com
mywedding.com
www.meredith.com
meredith.com
dev-theshop.meredith.com
mdp.api.meredith.com
wpm.ccmp.eu
secure.meredith.com
accounts.bhg.com
*.meredith.com
*.meredith.com
*.meredith.com
images.meredith.com
meredith.com
*.meredith.com
wpm03.eccmp.com
images.meredith.com

Certificate

The complete raw certificate details for *.secure.meredith.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIJLzCCCBegAwIBAgIQCWSWQBqs0zSihsJmN3iVkjANBgkqhkiG9w0BAQsFADA8
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g
UlNBIDIwNDggTTAyMB4XDTI0MDMxNDAwMDAwMFoXDTI1MDQxMjIzNTk1OVowIDEe
MBwGA1UEAwwVKi5zZWN1cmUubWVyZWRpdGguY29tMIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAso2WzI3g5NzzyMtnPZMapBj/WY03JsyV5NwlW3azvasx
e+YhvJ7+Mff6iGmWEXArtw5I3rg4tmoEGc7T2wJSV2NLQxL/KxiKEzyt21fD4pss
+b75CclhPsbsCd6OVyKkIZeNvfyhWr386ifO39X8C37VleBYYur1Ok8knchNhuFl
uEItpJ8k058jJW/BbBU3TPJBCyFSJoOLtyGXxRHSzOq9UP5gdxH0Jc2m79uCW97y
Hf3tIEQYhN3+qkZQkOzuJW7SWfBeBfIpUvmgKwla8eVRIPrsa3fHOT01aux/8aUQ
oe3Q1rIdplMN+90ulauqTp11Ipme2jXsrCC1vn19dQIDAQABo4IGRzCCBkMwHwYD
VR0jBBgwFoAUwDFSzVpQw4J8dHHOy+mc+XrrguIwHQYDVR0OBBYEFHyajpN+uaVn
s7cu4Vb3keQreN32MIIDdwYDVR0RBIIDbjCCA2qCFSouc2VjdXJlLm1lcmVkaXRo
LmNvbYISKi5zZWN1cmUuY2hpbGQuY29tgiEqLnNlY3VyZS5kaWFiZXRpY2xpdmlu
Z29ubGluZS5jb22CHCouc2VjdXJlLmZpdG5lc3NtYWdhemluZS5jb22CFyouc2Vj
dXJlLm1hZ2F6aW5lLnN0b3JlghMqLnNlY3VyZS5yZWNpcGUuY29tghsqLnNlY3Vy
ZS5kaXZpbmVjYXJvbGluZS5jb22CGiouc2VjdXJlLm1pZHdlc3RsaXZpbmcuY29t
ghMqLnNlY3VyZS5oZWFsdGguY29tghsqLnNlY3VyZS5hbGxwZW9wbGVxdWlsdC5j
b22CFiouc2VjdXJlLnBhcmVudGluZy5jb22CECouc2VjdXJlLmxoai5jb22CGSou
c2VjdXJlLmZpdHByZWduYW5jeS5jb22CGSouc2VjdXJlLmZhbWlseWNpcmNsZS5j
b22CHCouc2VjdXJlLnRyYWRpdGlvbmFsaG9tZS5jb22CGiouc2VjdXJlLm1hcnRo
YXN0ZXdhcnQuY29tghkqLnNlY3VyZS53b29kbWFnYXppbmUuY29tgiIqLnNlY3Vy
ZS5tYXJ0aGFzdGV3YXJ0d2VkZGluZ3MuY29tgg8qLnNlY3VyZS5ldy5jb22CICou
c2VjdXJlLmVudGVydGFpbm1lbnR3ZWVrbHkuY29tghEqLm1lcmVkaXRoY3NhLmNv
bYIaKi5jci1pZnJhbWUubWFnYXppbmUuc3RvcmWCHSouc2VjdXJlLnRyYXZlbGFu
ZGxlaXN1cmUuY29tghQqLnNlY3VyZS5wYXJlbnRzLmNvbYIQKi5zZWN1cmUuYmhn
LmNvbYIYKi5zZWN1cmUuYWdyaWN1bHR1cmUuY29tgh8qLnNlY3VyZS5hbGxyZWNp
cGVzbWFnYXppbmUuY29tgiEqLnNlY3VyZS5saXZpbmd0aGVjb3VudHJ5bGlmZS5j
b22CEiouc2VjdXJlLnNoYXBlLmNvbYIbKi5zZWN1cmUudHJhdmVsbWVyZWRpdGgu
Y29tghcqLnNlY3VyZS5lYXRpbmd3ZWxsLmNvbYIcKi5zZWN1cmUucGVvcGxlZW5l
c3Bhbm9sLmNvbYIbKi5zZWN1cmUubWRwLmFsbHJlY2lwZXMuY29tMBMGA1UdIAQM
MAowCAYGZ4EMAQIBMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcD
AQYIKwYBBQUHAwIwOwYDVR0fBDQwMjAwoC6gLIYqaHR0cDovL2NybC5yMm0wMi5h
bWF6b250cnVzdC5jb20vcjJtMDIuY3JsMHUGCCsGAQUFBwEBBGkwZzAtBggrBgEF
BQcwAYYhaHR0cDovL29jc3AucjJtMDIuYW1hem9udHJ1c3QuY29tMDYGCCsGAQUF
BzAChipodHRwOi8vY3J0LnIybTAyLmFtYXpvbnRydXN0LmNvbS9yMm0wMi5jZXIw
DAYDVR0TAQH/BAIwADCCAX4GCisGAQQB1nkCBAIEggFuBIIBagFoAHYAzxFW7tUu
fK/zh1vZaS6b6RpxZ0qwF+ysAdJbd87MOwgAAAGOPp4AEAAABAMARzBFAiAoLbQ4
Smv3+kn0z4Q/72RlYKSMyuYswrRQZe6Gg9MiEwIhAMD5gApDU+SSnfwc1tLJPN7P
uW18nTPIsS6lQwcGpYkzAHYAfVkeEuF4KnscYWd8Xv340IdcFKBOlZ65Ay/ZDowu
ebgAAAGOPp3/0AAABAMARzBFAiEAvsSIAKnDKNpdSF1kq3z9A/JtNaeo35o19Vig
3nU5LSkCIEV0zxPL5B74pgtHCBKUuPOG8/0g5V7glNOT6XVQUiHNAHYA5tIxY0B3
jMEQQQbXcbnOwdJA9paEhvu6hzId/R43jlAAAAGOPp3/6wAABAMARzBFAiEA/Rqi
DAJEkWVElC6TotTeTlku7WIdI519FuLh/8Vik1wCIDS1SFozKWfkGoelWL/U0vH1
zIJAkJth8GDWJdfk/Sk0MA0GCSqGSIb3DQEBCwUAA4IBAQAbqLnZCOTBqRvTnlSF
X8fxo6x8OINgFLZznxunSv0kAvyhzvCoPzJUYR4HntFaqkaXOPpIjDFBwQYwzryR
7d35xAz+FgJiMqwVHC9Wejx+5YDYF6mII9t4kMNiPTJt/UXEThOXlnbtzMTtlpDd
qoI60/zYVmpAt2pxz4PquH3MQzIOrKJ2hIGeyJqjlOkJoy5jeUuqfkp3LquxRMC9
30egJ2KpXyho9hi5fOS1Z2doQQNdT2YccrsytVI4Erh6wYU5YxEQlR+UicGufBLF
rW+F7HvHsJuSUwCbywLDRWrPmOQlTJD5SzalE/ncaQtR8UxCBwIX0yJA4WgZbAr7
qwtf
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAso2WzI3g5NzzyMtnPZMa
pBj/WY03JsyV5NwlW3azvasxe+YhvJ7+Mff6iGmWEXArtw5I3rg4tmoEGc7T2wJS
V2NLQxL/KxiKEzyt21fD4pss+b75CclhPsbsCd6OVyKkIZeNvfyhWr386ifO39X8
C37VleBYYur1Ok8knchNhuFluEItpJ8k058jJW/BbBU3TPJBCyFSJoOLtyGXxRHS
zOq9UP5gdxH0Jc2m79uCW97yHf3tIEQYhN3+qkZQkOzuJW7SWfBeBfIpUvmgKwla
8eVRIPrsa3fHOT01aux/8aUQoe3Q1rIdplMN+90ulauqTp11Ipme2jXsrCC1vn19
dQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12485329088216217169067038208178034066
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-14 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-04-12 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.secure.meredith.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22540238451061119970318080135320335682161351311557789705561910914589499552578301905040816452451334871273549897640559821647391598957283481516386562482811444146136715034899051967689679528949605776623859735018929439364038567089868756009562796794813649180892535051364438596198243062688744730169977897443935654927457238090867949654146552952946873704303086884435702480171412502390993067542405608321211780124624740837861398699178036105051481460921955963557845208801394043916320534420862551326922517361490743635796550546604422671788995675416277530068721010774530401806946692236396940100622156851783057620352033465402570669429
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7c9a8e937eb9a567b3b72ee156f791e42b78ddf6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (878 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secure.meredith.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secure.child.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secure.diabeticlivingonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secure.fitnessmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secure.magazine.store'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secure.recipe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secure.divinecaroline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secure.midwestliving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secure.health.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secure.allpeoplequilt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secure.parenting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secure.lhj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secure.fitpregnancy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secure.familycircle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secure.traditionalhome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secure.marthastewart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secure.woodmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secure.marthastewartweddings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secure.ew.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secure.entertainmentweekly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.meredithcsa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cr-iframe.magazine.store'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secure.travelandleisure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secure.parents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secure.bhg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secure.agriculture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secure.allrecipesmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secure.livingthecountrylife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secure.shape.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secure.travelmeredith.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secure.eatingwell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secure.peopleenespanol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secure.mdp.allrecipes.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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