*.secure.meredith.com

Issued by Amazon

About this certificate

This digital certificate with serial number 01:62:8c:2c:59:74:a8:6f:70:41:53:fe:82:0c:b8:d2 was issued on by Amazon.

With 65 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.secure.meredith.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:62:8c:2c:59:74:a8:6f:70:41:53:fe:82:0c:b8:d2
Serial Number (int): 1840916138990187524411563572888123602
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: af:08:40:91:a9:f2:99:8c:62:90:21:a4:0a:ed:63:f0:be:d7:65:b0
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 44:c8:c2:d1:fe:03:8f:cc:7a:59:5d:93:15:2a:46:c5:dc:8a:4d:02
Fingerprint (sha256): 82:00:f1:eb:e9:f8:0c:72:8a:eb:f1:4a:f4:e1:b4:ab:52:a0:1a:5c:ee:b8:2d:eb:f6:84:8c:0b:05:1d:23:a8

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate *.secure.meredith.com

65

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.secure.meredith.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.secure.meredith.com
*.secure.entertainmentweekly.com
*.secure.foodandwine.com
*.cr-iframe.secure.allpeoplequilt.com
*.secure.midwestliving.com
*.secure.eatingwell.com
*.secure.instyle.com
*.secure.cookinglight.com
*.cr-iframe.magazine.store
*.secure.themagnoliajournal.com
*.secure.parenting.com
*.secure.people.com
*.secure.realsimple.com
*.secure.parents.com
*.secure.mdp.allrecipes.com
*.secure.southernliving.com
*.secure.travelmeredith.com
*.secure.marthastewartweddings.com
*.secure.allrecipesmagazine.com
*.secure.child.com
*.cr-iframe.secure.agriculture.com
*.secure.marthastewart.com
*.secure.lhj.com
*.cr-iframe.secure.shape.com
*.secure.diabeticlivingonline.com
*.secure.recipe.com
*.cr-iframe.secure.livingthecountrylife.com
*.secure.rachaelraymag.com
*.secure.hellogiggles.com
*.secure.allpeoplequilt.com
*.secure.familycircle.com
*.secure.departures.com
*.secure.fitpregnancy.com
*.cr-iframe.secure.rachaelraymag.com
*.secure.myrecipes.com
*.secure.fitnessmagazine.com
*.secure.quizler.meredith.com
*.meredithcsa.com
*.cr-iframe.secure.themagnoliajournal.com
*.secure.more.com
*.cr-iframe.secure.fitnessmagazine.com
*.cr-iframe.secure.familycircle.com
*.secure.coastalliving.com
*.cr-iframe.secure.parents.com
*.secure.magazine.store
*.secure.divinecaroline.com
*.secure.peopleenespanol.com
*.secure.ew.com
*.cr-iframe.secure.marthastewart.com
*.secure.health.com
*.secure.woodmagazine.com
*.secure.shape.com
*.secure.travelandleisure.com
*.cr-iframe.secure.allrecipesmagazine.com
*.secure.agriculture.com
*.cr-iframe.secure.traditionalhome.com
*.secure.mywedding.com
*.secure.bhg.com
*.cr-iframe.secure.woodmagazine.com
*.cr-iframe.secure.midwestliving.com
*.secure.traditionalhome.com
*.cr-iframe.secure.diabeticlivingonline.com
*.secure.livingthecountrylife.com
*.cr-iframe.secure.eatingwell.com
*.cr-iframe.secure.bhg.com

Other certificates including the domain name meredith.com

(limited to 100 certificates)
wpm.ccmp.eu
payments.meredith.com
vcacontent.meredith.com
secure.meredith.com
dyncat.cip.meredith.com
*.meredith.com
secure.static.meredith.com
*.secure.meredith.com
secure.meredith.com
matrixdev.meredith.com
meredith.com
*.meredith.com
my.meredith.com
test.secure.static.meredith.com
meredith.com
images.meredith.com
citrix.meredith.com
wpm03.eccmp.com
*.meredith.com
5713573250596864-fe4.pantheonsite.io
images.meredith.com
munkireport.meredith.com
payments.meredith.com
meredith.com
woodwing.meredith.com
secure.static.meredith.com
*.meredith.com
es.meredith.com
*.woodwing.meredith.com
kptvoasis.meredith.com
www.meredith.com
webmail.meredith.com
wpm.ccmp.eu
specialoffers.meredith.com
splunk.meredith.com
secure.static.meredith.com
wpm03.eccmp.com
intranet.meredith.com
akamai-san192.exacttarget.com
secure.meredith.com
wpm.ccmp.eu
*.meredith.com
360.meredith.com
wpm.ccmp.eu
*.images.meredith.com
quizler.meredith.com
chrysler-stg.meredith.com
Dashboards.meredith.com
*.agriculture.com
dev.app.meredith.com
adobefrl.meredith.com
collabedge.meredith.com
go.meredith.com
dev.secure.meredith.com
*.meredith.com
5713573250596864-fe4.pantheonsite.io
*.meredith.com
*.meredith.com
360-auth.meredith.com
wpm03.eccmp.com
*.meredith.com
images.qa.shopnation.com
ise.meredith.com
wpm.ccmp.eu
secure.static.meredith.com
secure.meredith.com
images.meredith.com
assets.meredith.com
*.elvis.meredith.com
accounts.bhg.com
accounts.bhg.com
*.meredith.com
*.meredith.com
LCS.MEREDITH.COM
5713573250596864-fe4.pantheonsite.io
5713573250596864-fe4.pantheonsite.io
wpm03.eccmp.com
*.elvis.meredith.com
origin-secure.meredith.com
secure.meredith.com
mywedding.com
origin-dev.secure.meredith.com
secure.meredith.com
admin-dev.meredith.com
mywedding.com
www.meredith.com
meredith.com
dev-theshop.meredith.com
mdp.api.meredith.com
wpm.ccmp.eu
secure.meredith.com
accounts.bhg.com
*.meredith.com
*.meredith.com
*.meredith.com
images.meredith.com
meredith.com
*.meredith.com
wpm03.eccmp.com
images.meredith.com

Certificate

The complete raw certificate details for *.secure.meredith.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIM1DCCC7ygAwIBAgIQAWKMLFl0qG9wQVP+ggy40jANBgkqhkiG9w0BAQsFADBG
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg
Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0xOTExMTgwMDAwMDBaFw0yMDEyMTgx
MjAwMDBaMCAxHjAcBgNVBAMMFSouc2VjdXJlLm1lcmVkaXRoLmNvbTCCASIwDQYJ
KoZIhvcNAQEBBQADggEPADCCAQoCggEBAMzfACQrUP7gA/S1kx1gTDRhHg5oJsSm
PxbuAZp8KlzqJP0ZogKAif95QDkVGb4CUNV/PbuR4gmPFDgy1YnEs7UivmRdAdZx
DZ2sJK++FwkzLRUgc4cZy1WgF4oztfcsm24CN8Sc27d569BwCZc7CxF4YBi6djqM
hxSOSSjIpdYq5Yeu+hQ9dzLazeOQaVczbARzQO4vVWHWFRMmdifzTt5haiwTEuUP
+gc57EC4Q9AkrqAUyJAL9xMQ6iqBUohOBrFimGKPtYyOStIwmugvqFTlYfjYqRME
suEDSxNhXu+FGWdj/fiwt5ZRgR3SGIb+h1XXMIxYN3bvzD4NChwLhFkCAwEAAaOC
CeIwggneMB8GA1UdIwQYMBaAFFmkZgZSoHuVkjyjlAcnlnRb+T3QMB0GA1UdDgQW
BBSvCECRqfKZjGKQIaQK7WPwvtdlsDCCB4AGA1UdEQSCB3cwggdzghUqLnNlY3Vy
ZS5tZXJlZGl0aC5jb22CICouc2VjdXJlLmVudGVydGFpbm1lbnR3ZWVrbHkuY29t
ghgqLnNlY3VyZS5mb29kYW5kd2luZS5jb22CJSouY3ItaWZyYW1lLnNlY3VyZS5h
bGxwZW9wbGVxdWlsdC5jb22CGiouc2VjdXJlLm1pZHdlc3RsaXZpbmcuY29tghcq
LnNlY3VyZS5lYXRpbmd3ZWxsLmNvbYIUKi5zZWN1cmUuaW5zdHlsZS5jb22CGSou
c2VjdXJlLmNvb2tpbmdsaWdodC5jb22CGiouY3ItaWZyYW1lLm1hZ2F6aW5lLnN0
b3Jlgh8qLnNlY3VyZS50aGVtYWdub2xpYWpvdXJuYWwuY29tghYqLnNlY3VyZS5w
YXJlbnRpbmcuY29tghMqLnNlY3VyZS5wZW9wbGUuY29tghcqLnNlY3VyZS5yZWFs
c2ltcGxlLmNvbYIUKi5zZWN1cmUucGFyZW50cy5jb22CGyouc2VjdXJlLm1kcC5h
bGxyZWNpcGVzLmNvbYIbKi5zZWN1cmUuc291dGhlcm5saXZpbmcuY29tghsqLnNl
Y3VyZS50cmF2ZWxtZXJlZGl0aC5jb22CIiouc2VjdXJlLm1hcnRoYXN0ZXdhcnR3
ZWRkaW5ncy5jb22CHyouc2VjdXJlLmFsbHJlY2lwZXNtYWdhemluZS5jb22CEiou
c2VjdXJlLmNoaWxkLmNvbYIiKi5jci1pZnJhbWUuc2VjdXJlLmFncmljdWx0dXJl
LmNvbYIaKi5zZWN1cmUubWFydGhhc3Rld2FydC5jb22CECouc2VjdXJlLmxoai5j
b22CHCouY3ItaWZyYW1lLnNlY3VyZS5zaGFwZS5jb22CISouc2VjdXJlLmRpYWJl
dGljbGl2aW5nb25saW5lLmNvbYITKi5zZWN1cmUucmVjaXBlLmNvbYIrKi5jci1p
ZnJhbWUuc2VjdXJlLmxpdmluZ3RoZWNvdW50cnlsaWZlLmNvbYIaKi5zZWN1cmUu
cmFjaGFlbHJheW1hZy5jb22CGSouc2VjdXJlLmhlbGxvZ2lnZ2xlcy5jb22CGyou
c2VjdXJlLmFsbHBlb3BsZXF1aWx0LmNvbYIZKi5zZWN1cmUuZmFtaWx5Y2lyY2xl
LmNvbYIXKi5zZWN1cmUuZGVwYXJ0dXJlcy5jb22CGSouc2VjdXJlLmZpdHByZWdu
YW5jeS5jb22CJCouY3ItaWZyYW1lLnNlY3VyZS5yYWNoYWVscmF5bWFnLmNvbYIW
Ki5zZWN1cmUubXlyZWNpcGVzLmNvbYIcKi5zZWN1cmUuZml0bmVzc21hZ2F6aW5l
LmNvbYIdKi5zZWN1cmUucXVpemxlci5tZXJlZGl0aC5jb22CESoubWVyZWRpdGhj
c2EuY29tgikqLmNyLWlmcmFtZS5zZWN1cmUudGhlbWFnbm9saWFqb3VybmFsLmNv
bYIRKi5zZWN1cmUubW9yZS5jb22CJiouY3ItaWZyYW1lLnNlY3VyZS5maXRuZXNz
bWFnYXppbmUuY29tgiMqLmNyLWlmcmFtZS5zZWN1cmUuZmFtaWx5Y2lyY2xlLmNv
bYIaKi5zZWN1cmUuY29hc3RhbGxpdmluZy5jb22CHiouY3ItaWZyYW1lLnNlY3Vy
ZS5wYXJlbnRzLmNvbYIXKi5zZWN1cmUubWFnYXppbmUuc3RvcmWCGyouc2VjdXJl
LmRpdmluZWNhcm9saW5lLmNvbYIcKi5zZWN1cmUucGVvcGxlZW5lc3Bhbm9sLmNv
bYIPKi5zZWN1cmUuZXcuY29tgiQqLmNyLWlmcmFtZS5zZWN1cmUubWFydGhhc3Rl
d2FydC5jb22CEyouc2VjdXJlLmhlYWx0aC5jb22CGSouc2VjdXJlLndvb2RtYWdh
emluZS5jb22CEiouc2VjdXJlLnNoYXBlLmNvbYIdKi5zZWN1cmUudHJhdmVsYW5k
bGVpc3VyZS5jb22CKSouY3ItaWZyYW1lLnNlY3VyZS5hbGxyZWNpcGVzbWFnYXpp
bmUuY29tghgqLnNlY3VyZS5hZ3JpY3VsdHVyZS5jb22CJiouY3ItaWZyYW1lLnNl
Y3VyZS50cmFkaXRpb25hbGhvbWUuY29tghYqLnNlY3VyZS5teXdlZGRpbmcuY29t
ghAqLnNlY3VyZS5iaGcuY29tgiMqLmNyLWlmcmFtZS5zZWN1cmUud29vZG1hZ2F6
aW5lLmNvbYIkKi5jci1pZnJhbWUuc2VjdXJlLm1pZHdlc3RsaXZpbmcuY29tghwq
LnNlY3VyZS50cmFkaXRpb25hbGhvbWUuY29tgisqLmNyLWlmcmFtZS5zZWN1cmUu
ZGlhYmV0aWNsaXZpbmdvbmxpbmUuY29tgiEqLnNlY3VyZS5saXZpbmd0aGVjb3Vu
dHJ5bGlmZS5jb22CISouY3ItaWZyYW1lLnNlY3VyZS5lYXRpbmd3ZWxsLmNvbYIa
Ki5jci1pZnJhbWUuc2VjdXJlLmJoZy5jb20wDgYDVR0PAQH/BAQDAgWgMB0GA1Ud
JQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA7BgNVHR8ENDAyMDCgLqAshipodHRw
Oi8vY3JsLnNjYTFiLmFtYXpvbnRydXN0LmNvbS9zY2ExYi5jcmwwIAYDVR0gBBkw
FzALBglghkgBhv1sAQIwCAYGZ4EMAQIBMHUGCCsGAQUFBwEBBGkwZzAtBggrBgEF
BQcwAYYhaHR0cDovL29jc3Auc2NhMWIuYW1hem9udHJ1c3QuY29tMDYGCCsGAQUF
BzAChipodHRwOi8vY3J0LnNjYTFiLmFtYXpvbnRydXN0LmNvbS9zY2ExYi5jcnQw
DAYDVR0TAQH/BAIwADCCAQMGCisGAQQB1nkCBAIEgfQEgfEA7wB2AKS5CZC0GFgU
h7sTosxncAo8NZgE+RvfuON3zQ7IDdwQAAABbn99nY0AAAQDAEcwRQIhALk+qwaY
rw6Tr1RR9HYuT28B/e7LjDbAFzxAOzf2mIHMAiBePkWftVzteForRFC9Z+2ePdvD
P+smZI9xJOMNkjiVvgB1AId1v+dZfPiMQ5lfvfNu/1aNR1Y2/0q1YMG06v9eoIMP
AAABbn99niIAAAQDAEYwRAIgEuJZfsPeJiVbrCj2KmmtaOKnAqRqfN/zgCe5m6o6
pygCIE90sqVULWNWHrfbI7Bkbn0hOTdaCnyZLizm1+WwWjQVMA0GCSqGSIb3DQEB
CwUAA4IBAQBJ8ojYiyN2uEhugWbiBGtMCG6eOT65ZBWtS1OgRlPNqKS4yxZfC2na
TAj3qwKuzWhioOlBvSlje8YvuVJRBNR4/z60cJPBrXUNHXhAvSsBCsjzXpF4UoBj
3a89wIEwLva0NYCs3VmoNMOCfD57hEv7juns+KZPJIljXnGQY4g8b8Fep7mHiDGt
x/drMCwTJJ2va2rS4bBn+FIgyTvsT8b1qCcXco2qjJWnvdQk97KgfrowIPL4K/VS
YVeKtq87v9Pqwd9MbzEt6wGZzn1+NOicY+ma+2qIDrYaS/2XGlT6SGkZqR2EcwYO
d8fGXPZlfuUcL0bvCiGrfIDp8yWytnYh
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzN8AJCtQ/uAD9LWTHWBM
NGEeDmgmxKY/Fu4BmnwqXOok/RmiAoCJ/3lAORUZvgJQ1X89u5HiCY8UODLVicSz
tSK+ZF0B1nENnawkr74XCTMtFSBzhxnLVaAXijO19yybbgI3xJzbt3nr0HAJlzsL
EXhgGLp2OoyHFI5JKMil1irlh676FD13MtrN45BpVzNsBHNA7i9VYdYVEyZ2J/NO
3mFqLBMS5Q/6BznsQLhD0CSuoBTIkAv3ExDqKoFSiE4GsWKYYo+1jI5K0jCa6C+o
VOVh+NipEwSy4QNLE2Fe74UZZ2P9+LC3llGBHdIYhv6HVdcwjFg3du/MPg0KHAuE
WQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1840916138990187524411563572888123602
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-18 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-12-18 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.secure.meredith.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25862579883693663877992627497583832375692480021549592109091633995971611579440497820948485450869176187187881980957803031963663446600638298086132348679366477126373381314942467955382018620746842012382388106276921289694053768440505516478063755105676021971913418841516053675803954260596974954844356838301476449059216028843005328207480866103589884860030354617540846396351832556326333923970809583095698255513311801467113619168304065452021460296029894945639248451436040794716166931161092706244704568116421268106519773477192587599040808977838865072928209335623427641493056336036057348208557438732478616551250951689397089305689
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							af084091a9f2998c629021a40aed63f0bed765b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1911 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secure.meredith.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secure.entertainmentweekly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secure.foodandwine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cr-iframe.secure.allpeoplequilt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secure.midwestliving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secure.eatingwell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secure.instyle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secure.cookinglight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cr-iframe.magazine.store'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secure.themagnoliajournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secure.parenting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secure.people.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secure.realsimple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secure.parents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secure.mdp.allrecipes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secure.southernliving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secure.travelmeredith.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secure.marthastewartweddings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secure.allrecipesmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secure.child.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cr-iframe.secure.agriculture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secure.marthastewart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secure.lhj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cr-iframe.secure.shape.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secure.diabeticlivingonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secure.recipe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cr-iframe.secure.livingthecountrylife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secure.rachaelraymag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secure.hellogiggles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secure.allpeoplequilt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secure.familycircle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secure.departures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secure.fitpregnancy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cr-iframe.secure.rachaelraymag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secure.myrecipes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secure.fitnessmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secure.quizler.meredith.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.meredithcsa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cr-iframe.secure.themagnoliajournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secure.more.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cr-iframe.secure.fitnessmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cr-iframe.secure.familycircle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secure.coastalliving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cr-iframe.secure.parents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secure.magazine.store'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secure.divinecaroline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secure.peopleenespanol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secure.ew.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cr-iframe.secure.marthastewart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secure.health.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secure.woodmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secure.shape.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secure.travelandleisure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cr-iframe.secure.allrecipesmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secure.agriculture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cr-iframe.secure.traditionalhome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secure.mywedding.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secure.bhg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cr-iframe.secure.woodmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cr-iframe.secure.midwestliving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secure.traditionalhome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cr-iframe.secure.diabeticlivingonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secure.livingthecountrylife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cr-iframe.secure.eatingwell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cr-iframe.secure.bhg.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000016e7f7d9d8d0000040300473045022100b93eab0698af0e93af5451f4762e4f6f01fdeecb8c36c0173c403b37f69881cc02205e3e459fb55ced785a2b4450bd67ed9e3ddbc33feb26648f7124e30d923895be0075008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016e7f7d9e220000040300463044022012e2597ec3de26255bac28f62a69ad68e2a702a46a7cdff38027b99baa3aa72802204f74b2a5542d63561eb7db23b0646e7d2139375a0a7c992e2ce6d7e5b05a3415
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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