a-ue1.mydomaine.com

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 0d:df:a7:b2:12:34:d3:82:01:05:5f:d0:56:05:35:4e was issued on by Amazon.

With 96 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=a-ue1.mydomaine.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0d:df:a7:b2:12:34:d3:82:01:05:5f:d0:56:05:35:4e
Serial Number (int): 18441247415308503413807040655683564878
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 07:19:a8:ff:70:57:b6:4b:2c:1e:13:7b:56:4c:ba:a6:e4:64:00:4b
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 2d:9a:a2:4a:91:6f:1f:8f:0a:82:c1:93:38:cf:bf:e6:c3:b3:53:54
Fingerprint (sha256): b1:63:2d:94:39:70:8a:ff:de:cc:29:f5:9f:2b:51:ea:65:87:71:3a:1a:33:49:24:bf:58:51:ef:1d:82:79:f9

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate a-ue1.mydomaine.com

96

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for a-ue1.mydomaine.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

a-ue1.mydomaine.com
*.shape.com
*.a-ue1.myrecipes.com
a-ue1.southernliving.com
*.allrecipes.com
*.a-ue1.thebalancemoney.com
*.woodmagazine.com
*.allpeoplequilt.com
*.a-ue1.investopedia.com
dotdashmeredith.com
*.dotdashmeredith.com
*.a-ue1.allrecipes.com
*.a-ue1.marthastewart.com
a-ue1.myrecipes.com
shape.com
*.realsimple.com
*.a-ue1.eatingwell.com
*.peopleenespanol.com
allrecipes.com
*.a-ue1.ew.com
a-ue1.realsimple.com
*.eatingwell.com
*.a-ue1.realsimple.com
a-ue1.ew.com
*.a-ue1.instyle.com
southernliving.com
agriculture.com
midwestliving.com
a-ue1.foodandwine.com
a-ue1.seriouseats.com
mydomaine.com
bhg.com
a-ue1.instyle.com
*.a-ue1.shape.com
a-ue1.allpeoplequilt.com
*.southernliving.com
*.a-ue1.southernliving.com
*.a-ue1.foodandwine.com
*.a-ue1.seriouseats.com
*.a-ue1.woodmagazine.com
a-ue1.carbonmakesdiamonds.com
*.instyle.com
a-ue1.woodmagazine.com
eatingwell.com
*.a-ue1.allpeoplequilt.com
*.a-ue1.dailypaws.com
realsimple.com
ew.com
a-ue1.thebalancemoney.com
*.bhg.com
a-ue1.marthastewart.com
*.marthastewart.com
investopedia.com
*.dailypaws.com
*.mydomaine.com
*.thebalancemoney.com
*.carbonmakesdiamonds.com
*.ew.com
*.a-ue1.dotdashmeredith.com
simplyrecipes.com
carbonmakesdiamonds.com
*.seriouseats.com
a-ue1.peopleenespanol.com
a-ue1.midwestliving.com
*.simplyrecipes.com
marthastewart.com
*.a-ue1.peopleenespanol.com
thebalancemoney.com
*.midwestliving.com
*.a-ue1.bhg.com
a-ue1.dailypaws.com
*.foodandwine.com
*.a-ue1.carbonmakesdiamonds.com
*.a-ue1.agriculture.com
instyle.com
*.a-ue1.mydomaine.com
*.a-ue1.midwestliving.com
a-ue1.simplyrecipes.com
dailypaws.com
a-ue1.allrecipes.com
foodandwine.com
peopleenespanol.com
a-ue1.eatingwell.com
myrecipes.com
a-ue1.dotdashmeredith.com
*.investopedia.com
a-ue1.bhg.com
a-ue1.shape.com
*.myrecipes.com
a-ue1.investopedia.com
allpeoplequilt.com
*.a-ue1.simplyrecipes.com
a-ue1.agriculture.com
*.agriculture.com
woodmagazine.com
seriouseats.com

Other certificates including the domain name mydomaine.com

(limited to 100 certificates)
k2.shared.global.fastly.net
dotdash.map.fastly.net
continual.app.prod.aws.byrdie.com
k2.shared.global.fastly.net
continual.app.qa.aws.byrdie.com
persistent.app.qa.aws.byrdie.com
dotdash.map.fastly.net
pe-adhoc-5.app.qa.aws.byrdie.com
pe-batch.app.qa.aws.byrdie.com
a-ue1.mydomaine.com
dotdash.map.fastly.net
local.dotdash.com
k2.shared.global.fastly.net
disposable.app.qa.aws.byrdie.com
k2.shared.global.fastly.net
persistent.app.qa.aws.byrdie.com
k2.shared.global.fastly.net
k2.shared.global.fastly.net
k2.shared.global.fastly.net
local.dotdash.com
continual.app.qa.aws.byrdie.com
continual.app.prod.aws.byrdie.com
local.dotdash.com
k2.shared.global.fastly.net
k2.shared.global.fastly.net
disposable.app.qa.aws.byrdie.com
persistent.app.qa.aws.byrdie.com
mydomaine.com
pe-btch.app.qa.aws.byrdie.com
local.dotdash.com
k2.shared.global.fastly.net
continual.app.prod.aws.byrdie.com
pe.app.qa.aws.byrdie.com
dotdash.map.fastly.net
continual.app.prod.aws.byrdie.com
byrdie.com
k2.shared.global.fastly.net
k2.shared.global.fastly.net
continual.app.qa.aws.byrdie.com
local.dotdash.com
continual.app.prod.aws.byrdie.com
k2.shared.global.fastly.net
disposable.app.qa.aws.byrdie.com
local.dotdash.com
dotdash.map.fastly.net
k2.shared.global.fastly.net
pe-adhoc-3.app.qa.aws.byrdie.com
k2.shared.global.fastly.net
persistent.app.qa.aws.byrdie.com
k2.shared.global.fastly.net
a-uw2.mydomaine.com
k2.shared.global.fastly.net
continual.app.qa.aws.byrdie.com
a-ue1.mydomaine.com
continual.app.prod.aws.byrdie.com
link.mydomaine.com
mydomaine.com
link.mydomaine.com
k2.shared.global.fastly.net
k2.shared.global.fastly.net
k2.shared.global.fastly.net
local.dotdash.com
continual.app.prod.aws.byrdie.com
k2.shared.global.fastly.net
local.dotdash.com
local.dotdash.com
continual.app.qa.aws.byrdie.com
k2.shared.global.fastly.net
*.whowhatwear.com
continual.app.prod.aws.byrdie.com
k2.shared.global.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
k2.shared.global.fastly.net
newsletter.mydomaine.com
k2.shared.global.fastly.net
a-ue1.mydomaine.com
k2.shared.global.fastly.net
continual.app.qa.aws.byrdie.com
pe-adhoc-3.app.qa.aws.byrdie.com
k2.shared.global.fastly.net
dotdash.map.fastly.net
k2.shared.global.fastly.net
dotdash.map.fastly.net
k2.shared.global.fastly.net
newsletter.mydomaine.com
k2.shared.global.fastly.net
*.whowhatwear.com
mydomaine.com
local.dotdash.com
mail.thespruce.com
k2.shared.global.fastly.net
newsletter.mydomaine.com
k2.shared.global.fastly.net
dotdash.map.fastly.net
links.allrecipes.com
dotdash.map.fastly.net
persistent.app.qa.aws.byrdie.com
k2.shared.global.fastly.net
k2.shared.global.fastly.net

Certificate

The complete raw certificate details for a-ue1.mydomaine.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4XKoje/AGF5xWfLXN41z
itsrNygTbWf9BWh3h1HhddV6mQyjfg17d1CNyCNCu9AAFCPXqK0C4AO3y7RnVy9E
2PjnzpFKD6A3Ts3FnfHbTV8elsm0/7vI6o1SmbTcRo+cD45gs+A7FP4zlhqD6JKd
Xr2n+LMS+n2W7Tg+gYOjqvm3gCbpBZeVi3TTa0nfelHcMgkgbFukWXyqmNtVh5x2
KxAZ6eNzB0N2PUgKh3KaJk9SmE6808pqVqgP0WsnHN2JhasHy92d8QosWST3F8MB
yXSVDEPzD5bz+ZEkFbf/FKmDNPMyLSXI1aIbCFxIBisKZycF7xbHq3OnqoVhhU6n
LwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18441247415308503413807040655683564878
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-26 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-06-24 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'a-ue1.mydomaine.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28460158789465130855213633920320265139290738069534535926777042850895333159886446648730805762134637563304029146095657994568439692641245842484407353030336655582727761384743422192020935310578783012397449232966603903624706892438604681441150118384339648358467412059327780567119854213277273051587987497430365534568404574725521210391872745432757068058602313863934329110638381650717471929931931327608116740643864923546355810514741560528268443445091653481995284115104778890763164503256704939103047800214291597547082583050548618375578486221533974759557647361747101587561377604403248612642139969627573032695945089796809979504431
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0719a8ff7057b64b2c1e137b564cbaa6e464004b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2012 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a-ue1.mydomaine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shape.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.a-ue1.myrecipes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a-ue1.southernliving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.allrecipes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.a-ue1.thebalancemoney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.woodmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.allpeoplequilt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.a-ue1.investopedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dotdashmeredith.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dotdashmeredith.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.a-ue1.allrecipes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.a-ue1.marthastewart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a-ue1.myrecipes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shape.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.realsimple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.a-ue1.eatingwell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.peopleenespanol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allrecipes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.a-ue1.ew.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a-ue1.realsimple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eatingwell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.a-ue1.realsimple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a-ue1.ew.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.a-ue1.instyle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southernliving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agriculture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'midwestliving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a-ue1.foodandwine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a-ue1.seriouseats.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mydomaine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bhg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a-ue1.instyle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.a-ue1.shape.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a-ue1.allpeoplequilt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.southernliving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.a-ue1.southernliving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.a-ue1.foodandwine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.a-ue1.seriouseats.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.a-ue1.woodmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a-ue1.carbonmakesdiamonds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.instyle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a-ue1.woodmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eatingwell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.a-ue1.allpeoplequilt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.a-ue1.dailypaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'realsimple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ew.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a-ue1.thebalancemoney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bhg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a-ue1.marthastewart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.marthastewart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investopedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dailypaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mydomaine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thebalancemoney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carbonmakesdiamonds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ew.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.a-ue1.dotdashmeredith.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simplyrecipes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carbonmakesdiamonds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.seriouseats.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a-ue1.peopleenespanol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a-ue1.midwestliving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.simplyrecipes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marthastewart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.a-ue1.peopleenespanol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thebalancemoney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.midwestliving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.a-ue1.bhg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a-ue1.dailypaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.foodandwine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.a-ue1.carbonmakesdiamonds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.a-ue1.agriculture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'instyle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.a-ue1.mydomaine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.a-ue1.midwestliving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a-ue1.simplyrecipes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dailypaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a-ue1.allrecipes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foodandwine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peopleenespanol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a-ue1.eatingwell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myrecipes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a-ue1.dotdashmeredith.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.investopedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a-ue1.bhg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a-ue1.shape.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myrecipes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a-ue1.investopedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allpeoplequilt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.a-ue1.simplyrecipes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a-ue1.agriculture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.agriculture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'woodmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seriouseats.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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