ti-media.map.fastly.net

- Fastly, Inc. -

Issued by GlobalSign CloudSSL CA - SHA256 - G3

About this certificate

This digital certificate with serial number 15:3d:c7:20:83:34:7d:7f:6e:b9:4e:d3 was issued on by GlobalSign nv-sa.

With 103 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Fastly, Inc.

Organization: Fastly, Inc.
State / Province: Californa
Locality: San Francisco
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 15:3d:c7:20:83:34:7d:7f:6e:b9:4e:d3
Serial Number (int): 6573870031924959745010126547
Serial Number lenght: 93 bits, 12 octets

SubjectKeyId: a1:29:51:35:b4:b3:09:c4:a1:9c:3f:06:ab:78:3c:c2:59:89:5d:75
AuthorityKeyId: a9:2b:87:e1:ce:24:47:3b:1b:bf:cf:85:37:02:55:9d:0d:94:58:e6

Fingerprint (sha1): d6:22:91:b8:5c:2c:ae:b8:31:21:c3:de:6b:f8:9e:49:58:58:74:f9
Fingerprint (sha256): 7e:f9:a7:19:5d:4d:a5:c4:fb:30:2f:c5:08:d9:c9:37:31:5d:d6:79:f2:c3:ae:c4:0e:e5:20:00:c3:70:74:c9

Issuing Certificate URL: http://secure.globalsign.com/cacert/cloudsslsha2g3.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/cloudsslsha2g3

Check the revocation status for certificate ti-media.map.fastly.net

103

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ti-media.map.fastly.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ti-media.map.fastly.net
*.amateurgardening.com
*.amateurphotographer.co.uk
*.anglersmail.co.uk
*.artists.nme.com
*.celebsnow.co.uk
*.countrylife.co.uk
*.cyclingweekly.co.uk
*.cyclingweekly.com
*.decanter.com
*.equoevents.com
*.golf-monthly.co.uk
*.goodtoknow.co.uk
*.horseandhound.co.uk
*.housetohome.co.uk
*.idealhome.co.uk
*.internal.ti-media.net
*.internal.timeincuk.net
*.ipcdigital.co.uk
*.keystone.ti-media.net
*.lifedeathprizes.com
*.livingetc.com
*.look.co.uk
*.marieclaire.co.uk
*.mbr.co.uk
*.mby.com
*.nme.com
*.nowmagazine.co.uk
*.pbo.co.uk
*.rugbyworld.com
*.shootinguk.co.uk
*.superyachtworld.com
*.thefield.co.uk
*.thisispowder.co.uk
*.ti-media.com
*.ti-media.net
*.timeincuk.net
*.trustedreviews.com
*.uncut.co.uk
*.wallpaper.com
*.whatdigitalcamera.com
*.whatsontv.co.uk
*.womanandhome.com
*.womanmagazine.co.uk
*.womansown.co.uk
*.womansweekly.com
*.worldsoccer.com
*.wp.ti-media.net
*.wp.timeincuk.net
*.yachtingmonthly.com
*.yachtingworld.com
*.ybw.com
amateurgardening.com
amateurphotographer.co.uk
anglersmail.co.uk
celebsnow.co.uk
countrylife.co.uk
cyclingweekly.co.uk
cyclingweekly.com
decanter.com
equoevents.com
golf-monthly.co.uk
goodtoknow.co.uk
homesandgardens.com
horseandhound.co.uk
housetohome.co.uk
idealhome.co.uk
internal.ti-media.net
internal.timeincuk.net
ipcdigital.co.uk
keystone.ti-media.net
lifedeathprizes.com
livingetc.com
look.co.uk
marieclaire.co.uk
mbr.co.uk
mby.com
nme.com
nowmagazine.co.uk
pbo.co.uk
rugbyworld.com
shootinguk.co.uk
superyachtworld.com
thefield.co.uk
thisispowder.co.uk
ti-media.com
ti-media.net
timeincuk.net
trustedreviews.com
uncut.co.uk
wallpaper.com
whatdigitalcamera.com
whatsontv.co.uk
womanandhome.com
womanmagazine.co.uk
womansown.co.uk
womansweekly.com
worldsoccer.com
wp.ti-media.net
wp.timeincuk.net
yachtingmonthly.com
yachtingworld.com
ybw.com

Other certificates including the domain name ti-media.map.fastly.net

(limited to 100 certificates)

Certificate

The complete raw certificate details for ti-media.map.fastly.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAola5iXqgkhk9TgcS9ZHL
G5W4V/AH6acTViNr0qhFTfrs3o+sWFvN39eWToB/zdKhucOAaiz9aeTghGhyvBWr
6cHVX/qGE9YyPwZmAB/HJ3uJWqLofv0dhapg3Hyf4gqf46yyabs9cqwn9dDnjfz/
j+DStUpwG3G0jt/H6Ba+CaHz2/m9uomz8ZnjeJa2/NA9U9x1kFMSEBjOe1wAn+Jq
D9ypeFltyYprqOaJxT7HcZZxFU7QYyvfhRMH8x7onOO01/uOrlNmlNZwEKStrYkU
uUm0PJlsdPgL8+nLQO09o0Az7xxIVhvGf5WMdXCJspJMomcfAwJQVC/sLXiZCRYB
7wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6573870031924959745010126547
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign CloudSSL CA - SHA256 - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-13 08:26:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-24 17:58:42 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Californa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Fastly, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ti-media.map.fastly.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20493370974600057648741139299310622431716495829187890664824620915123161064869420448640860853576328254802637842750889367266793878824792860810104468571856056757820637061267895108455882622111805109137081944929146986163230911761131017600448954953167551239732784868181752243970760149190876310486843684434905211299070674244584336724820265310127064648333922490127489202119641638389946461657545679657423684624352851203730415604337930233885541141645460427721799434041379700050430698452847604822150747233696576859812846532440406332365737348700605475694127502298699790360401731391680822538234679124909722380157305454930464997871
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/cloudsslsha2g3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/cloudsslsha2g3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1929 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ti-media.map.fastly.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amateurgardening.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amateurphotographer.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.anglersmail.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.artists.nme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.celebsnow.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.countrylife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cyclingweekly.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cyclingweekly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.decanter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.equoevents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.golf-monthly.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.goodtoknow.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.horseandhound.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.housetohome.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.idealhome.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.internal.ti-media.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.internal.timeincuk.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ipcdigital.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.keystone.ti-media.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lifedeathprizes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.livingetc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.look.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.marieclaire.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mbr.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mby.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nowmagazine.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pbo.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rugbyworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shootinguk.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.superyachtworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thefield.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thisispowder.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ti-media.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ti-media.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.timeincuk.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.trustedreviews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uncut.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wallpaper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.whatdigitalcamera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.whatsontv.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.womanandhome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.womanmagazine.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.womansown.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.womansweekly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.worldsoccer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wp.ti-media.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wp.timeincuk.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yachtingmonthly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yachtingworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ybw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amateurgardening.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amateurphotographer.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anglersmail.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'celebsnow.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'countrylife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cyclingweekly.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cyclingweekly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'decanter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'equoevents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'golf-monthly.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goodtoknow.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homesandgardens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'horseandhound.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'housetohome.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idealhome.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'internal.ti-media.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'internal.timeincuk.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipcdigital.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keystone.ti-media.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lifedeathprizes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livingetc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'look.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marieclaire.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mbr.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mby.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nowmagazine.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pbo.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rugbyworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shootinguk.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'superyachtworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thefield.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thisispowder.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ti-media.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ti-media.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'timeincuk.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trustedreviews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uncut.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wallpaper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whatdigitalcamera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whatsontv.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'womanandhome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'womanmagazine.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'womansown.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'womansweekly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'worldsoccer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wp.ti-media.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wp.timeincuk.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yachtingmonthly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yachtingworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ybw.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a92b87e1ce24473b1bbfcf853702559d0d9458e6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a1295135b4b309c4a19c3f06ab783cc259895d75
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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