www.magazine.store

- Meredith Operations Corporation -

Issued by Sectigo RSA Organization Validation Secure Server CA

About this certificate

This digital certificate with serial number 7e:8d:bb:e2:ab:25:a7:fe:c8:94:d4:57:b2:87:f6:7c was issued on by Sectigo Limited.

With 9 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Meredith Operations Corporation

Organization: Meredith Operations Corporation
State / Province: Iowa
Country: US

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate will expire on

Certificate Details

Serial Number (hex): 7e:8d:bb:e2:ab:25:a7:fe:c8:94:d4:57:b2:87:f6:7c
Serial Number (int): 168218652095080882037516856416306460284
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 2e:7c:83:87:cd:e0:ed:34:75:f9:02:77:51:e8:be:92:66:01:73:2b
AuthorityKeyId: 17:d9:d6:25:27:67:f9:31:c2:49:43:d9:30:36:44:8c:6c:a9:4f:eb

Fingerprint (sha1): 7a:cb:28:7a:91:62:40:71:bf:9d:33:c6:cb:44:44:1f:69:d0:5b:20
Fingerprint (sha256): a4:a8:c7:ce:59:1a:3e:77:30:ee:3e:96:34:6c:71:3a:ec:33:b3:ab:77:08:d6:30:91:a6:bc:c1:73:0c:e2:46

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com
CRL Distribution Point: http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl

Check the revocation status for certificate www.magazine.store

9

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.magazine.store

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.magazine.store
dev.magazine.store
dev.staging.magazine.store
dev.www.magazine.store
magazine.store
staging.magazine.store
test.magazine.store
test.staging.magazine.store
test.www.magazine.store

Other certificates including the domain name magazine.store

(limited to 100 certificates)
payments.meredith.com
*.secure.meredith.com
secure.meredith.com
payments.meredith.com
specialoffers.meredith.com
*.agriculture.com
dev.secure.meredith.com
secure.meredith.com
mywedding.com
secure.meredith.com
mywedding.com
payments.magazines.com
secure.meredith.com
staging.payments.magazines.com
secure.meredith.com
test.payments.meredith.com
secure.meredith.com
payments.magazines.com
test.secure.meredith.com
magazine.store
www.magazine.store
cr-iframe.magazine.store
secure.meredith.com
*.secure.meredith.com
secure.meredith.com
cr-iframe.magazine.store
payments.meredith.com
*.secure.meredith.com
secure.meredith.com
test.payments.meredith.com
secure.meredith.com
magazine.store
cr-iframe.magazine.store
secure.meredith.com
mywedding.com
*.agriculture.com
*.secure.meredith.com
magazine.store
origin-cr-iframe.magazine.store
secure.meredith.com
dev.payments.magazines.com
*.secure.meredith.com
www.magazine.store
*.secure.meredith.com
secure.meredith.com
dev.secure.meredith.com
dev.payments.magazines.com
origin-cr-iframe.magazine.store
test.payments.meredith.com
payments.meredith.com
secure.meredith.com
secure.meredith.com
origin-cr-iframe.magazine.store
test.secure.meredith.com
*.secure.meredith.com
payments.meredith.com
mywedding.com
payments.meredith.com
*.secure.meredith.com
mywedding.com
*.secure.meredith.com
test.secure.meredith.com
dev.payments.magazines.com
payments.magazines.com
secure.meredith.com
magazine.store
secure.meredith.com
secure.meredith.com
secure.meredith.com
origin-cr-iframe.magazine.store
staging.payments.magazines.com
dev.payments.magazines.com
payments.meredith.com
secure.meredith.com
www.magazine.store
origin-cr-iframe.magazine.store
test.payments.magazines.com
*.secure.meredith.com
magazine.store
secure.meredith.com
dev.payments.magazine.store
secure.meredith.com
payments.magazines.com
*.secure.meredith.com
test.secure.meredith.com
dev.payments.magazines.com
payments.meredith.com
*.secure.meredith.com
payments.meredith.com
mywedding.com
cr-iframe.magazine.store
dev.secure.meredith.com
payments.meredith.com
secure.meredith.com
secure.meredith.com
cr-iframe.magazine.store
dev.payments.magazines.com
secure.meredith.com
mywedding.com
secure.meredith.com

Certificate

The complete raw certificate details for www.magazine.store in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7RZVc9FU5q82RAHZMQb
xmS85wHPjpc7/O5wra3QI5+uJqA8ALELm8WTeUjvp6UEkktRhb7yb/Imve/IqKsJ
wknfeNN2KLDCHQl9q0NrnPakeLPxLyXaZG2pcMi1PhB5JRl+E5KrewSV8ZsNdvC4
oJCZ9OxT9/cKaVWFSGJWNVgRv2kSOKuxFuu+TlNeKCY6SXIcuKEpRtvO6hF/3vu1
rh5WpmWiZdDRdInKgrkmjxCjhiUtYrn+Kk208SzYXQracdYTottawCReNnT5+Ezf
U5EAg7qMuVPmos6mMCKuSTuWljeIkuNBryLVc9ePBQJ6x3pwK32eFKSl+p2WF8rR
pQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 168218652095080882037516856416306460284
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Organization Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-19 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-18 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Iowa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Meredith Operations Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.magazine.store'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21170730318862646784625981817588051072075318511311741920632469357372972987766162483503610620511918084447417054096744098522905560374134181910072382725098176171226222720371585963755411147742610547023606458018753613212842661538498510726384791434364784135771567743337908259844787540862749227572854528633526621962096358617209882471965191431387269008584410560389336073388603813659456543706341301540642580820590244981684930230346248911086089609956801718772576961340090077842940980384126306349497066985217099720222874538778027492322883615913374454411602332156622503237462139804306908434590420695890812805082318739764127912357
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 17d9d6252767f931c24943d93036448c6ca94feb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2e7c8387cde0ed3475f9027751e8be926601732b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (210 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.magazine.store'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.magazine.store'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.staging.magazine.store'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.www.magazine.store'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.store'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.magazine.store'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.magazine.store'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.staging.magazine.store'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.www.magazine.store'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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