secure.meredith.com

- Meredith Corporation -

Issued by DigiCert SHA2 High Assurance Server CA

About this certificate

This digital certificate with serial number 0e:c2:ef:75:a7:61:a5:ba:de:c5:a4:bf:d9:6e:05:77 was issued on by DigiCert Inc.

With 62 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Meredith Corporation

Organization: Meredith Corporation
State / Province: Iowa
Locality: Des Moines
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:c2:ef:75:a7:61:a5:ba:de:c5:a4:bf:d9:6e:05:77
Serial Number (int): 19621354348936910781030771268640441719
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 36:61:dd:6c:a8:fd:1e:a4:8b:7e:b7:d9:fb:22:71:58:11:db:5d:89
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b

Fingerprint (sha1): 59:ac:df:6b:72:48:e2:52:fe:69:08:33:26:5e:5e:c5:ec:88:62:c7
Fingerprint (sha256): 76:08:ab:ee:95:e8:60:9a:03:98:f0:bd:8c:f0:34:91:d9:e6:e8:ec:2c:d6:fc:bf:f8:60:1c:18:de:ac:56:6b

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g1.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g1.crl

Check the revocation status for certificate secure.meredith.com

62

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for secure.meredith.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

secure.meredith.com
secure.agriculture.com
secure.allpeoplequilt.com
secure.allrecipesmagazine.com
secure.americanbaby.com
secure.bhg.com
secure.child.com
secure.countryhome.com
secure.diabeticlivingonline.com
secure.divinecaroline.com
secure.diyadvice.com
secure.diyideas.com
secure.eatingwell.com
secure.familycircle.com
secure.familyfunmag.com
secure.mywedding.com
secure.fitnessmagazine.com
secure.fitpregnancy.com
secure.hearthealthyonline.com
secure.howtosew.com
secure.lhj.com
secure.livingthecountrylife.com
secure.marthastewart.com
secure.marthastewartweddings.com
secure.midwestliving.com
secure.more.com
secure.parenting.com
secure.parents.com
secure.quizler.meredith.com
secure.rachaelraymag.com
secure.recipe.com
secure.scrapbooksetc.com
secure.shape.com
secure.traditionalhome.com
secure.travelmeredith.com
secure.woodmagazine.com
secure.mdp.allrecipes.com
www.magazine.store
magazine.store
secure.poshcoloringstudio.com
secure.magazine.store
secure.themagnoliajournal.com
www.meredithcsa.com
cr-iframe.magazine.store
cr-iframe.secure.agriculture.com
cr-iframe.secure.allpeoplequilt.com
cr-iframe.secure.bhg.com
cr-iframe.secure.diabeticlivingonline.com
cr-iframe.secure.eatingwell.com
cr-iframe.secure.familycircle.com
cr-iframe.secure.fitnessmagazine.com
cr-iframe.secure.livingthecountrylife.com
cr-iframe.secure.marthastewart.com
cr-iframe.secure.marthastewartweddings.com
cr-iframe.secure.midwestliving.com
cr-iframe.secure.parents.com
cr-iframe.secure.rachaelraymag.com
cr-iframe.secure.shape.com
cr-iframe.secure.themagnoliajournal.com
cr-iframe.secure.traditionalhome.com
cr-iframe.secure.woodmagazine.com
cr-iframe.secure.allrecipesmagazine.com

Other certificates including the domain name meredith.com

(limited to 100 certificates)
wpm.ccmp.eu
payments.meredith.com
vcacontent.meredith.com
secure.meredith.com
dyncat.cip.meredith.com
*.meredith.com
secure.static.meredith.com
*.secure.meredith.com
secure.meredith.com
matrixdev.meredith.com
meredith.com
*.meredith.com
my.meredith.com
test.secure.static.meredith.com
meredith.com
images.meredith.com
citrix.meredith.com
wpm03.eccmp.com
*.meredith.com
5713573250596864-fe4.pantheonsite.io
images.meredith.com
munkireport.meredith.com
payments.meredith.com
meredith.com
woodwing.meredith.com
secure.static.meredith.com
*.meredith.com
es.meredith.com
*.woodwing.meredith.com
kptvoasis.meredith.com
www.meredith.com
webmail.meredith.com
wpm.ccmp.eu
specialoffers.meredith.com
splunk.meredith.com
secure.static.meredith.com
wpm03.eccmp.com
intranet.meredith.com
akamai-san192.exacttarget.com
secure.meredith.com
wpm.ccmp.eu
*.meredith.com
360.meredith.com
wpm.ccmp.eu
*.images.meredith.com
quizler.meredith.com
chrysler-stg.meredith.com
Dashboards.meredith.com
*.agriculture.com
dev.app.meredith.com
adobefrl.meredith.com
collabedge.meredith.com
go.meredith.com
dev.secure.meredith.com
*.meredith.com
5713573250596864-fe4.pantheonsite.io
*.meredith.com
*.meredith.com
360-auth.meredith.com
wpm03.eccmp.com
*.meredith.com
images.qa.shopnation.com
ise.meredith.com
wpm.ccmp.eu
secure.static.meredith.com
secure.meredith.com
images.meredith.com
assets.meredith.com
*.elvis.meredith.com
accounts.bhg.com
accounts.bhg.com
*.meredith.com
*.meredith.com
LCS.MEREDITH.COM
5713573250596864-fe4.pantheonsite.io
5713573250596864-fe4.pantheonsite.io
wpm03.eccmp.com
*.elvis.meredith.com
origin-secure.meredith.com
secure.meredith.com
mywedding.com
origin-dev.secure.meredith.com
secure.meredith.com
admin-dev.meredith.com
mywedding.com
www.meredith.com
meredith.com
dev-theshop.meredith.com
mdp.api.meredith.com
wpm.ccmp.eu
secure.meredith.com
accounts.bhg.com
*.meredith.com
*.meredith.com
*.meredith.com
images.meredith.com
meredith.com
*.meredith.com
wpm03.eccmp.com
images.meredith.com

Certificate

The complete raw certificate details for secure.meredith.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlyFX52MSnOO2bosaYb7l
lHmuem76bNLC40MeqCLvk2cyDgqbYPCUgfip+8IH46eeMyJkYIzp7coNbiYwVVpI
Jh+mCKRHjE1wlC09q/eVjvoZUS1Gdlx3lhMGrHE1nDLSMTcAfG/M2jCUkMd99iPR
mUUxfw9HrteUAb3+e/p9vfovEVmhRnlHw5uvdhF6fA98L9kcXJrT23nGejv9Rs6e
tXOJJlDglKA1Dm25TRet1B8Mcyh2vwaaP8ImAhcqJHdKFaZ94yDaFWdj6Ze813sk
5YO5Q6AR8PBmnF7sJ+1jHPGKFTs8F5Fwewqaejnx7jed+rFqqwjZR1CF7JKIB/WF
3wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19621354348936910781030771268640441719
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-09-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-14 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Iowa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Des Moines'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Meredith Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'secure.meredith.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19078426280619312723431486359791366102534205011812411711672147475706880934487228503804995984990580713894101843806272625897655074330122970834001512081108854573957212923733545555653267296476983850162138518193281725482461151659364491895790921631865756156938812406181915731586098882095981538287129257367932800867946124752262264712456523455494256704524460187002989660330345360891239353549731893998907787287434181108351373887236443635332969685771436087832267837650961252845458867979045686199464038976864891157523995320984847123534567094936305013444760156807735582767003800335682640743423961563616552369715226659887361918431
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3661dd6ca8fd1ea48b7eb7d9fb22715811db5d89
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1734 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.meredith.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.agriculture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.allpeoplequilt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.allrecipesmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.americanbaby.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.bhg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.child.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.countryhome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.diabeticlivingonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.divinecaroline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.diyadvice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.diyideas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.eatingwell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.familycircle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.familyfunmag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mywedding.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.fitnessmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.fitpregnancy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.hearthealthyonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.howtosew.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.lhj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.livingthecountrylife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.marthastewart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.marthastewartweddings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.midwestliving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.more.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.parenting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.parents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.quizler.meredith.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.rachaelraymag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.recipe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.scrapbooksetc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.shape.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.traditionalhome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.travelmeredith.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.woodmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mdp.allrecipes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.magazine.store'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.store'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.poshcoloringstudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.magazine.store'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.themagnoliajournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.meredithcsa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cr-iframe.magazine.store'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cr-iframe.secure.agriculture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cr-iframe.secure.allpeoplequilt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cr-iframe.secure.bhg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cr-iframe.secure.diabeticlivingonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cr-iframe.secure.eatingwell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cr-iframe.secure.familycircle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cr-iframe.secure.fitnessmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cr-iframe.secure.livingthecountrylife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cr-iframe.secure.marthastewart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cr-iframe.secure.marthastewartweddings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cr-iframe.secure.midwestliving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cr-iframe.secure.parents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cr-iframe.secure.rachaelraymag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cr-iframe.secure.shape.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cr-iframe.secure.themagnoliajournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cr-iframe.secure.traditionalhome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cr-iframe.secure.woodmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cr-iframe.secure.allrecipesmagazine.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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