a-ue1.mydomaine.com

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 06:87:b3:5e:61:85:86:8e:b2:63:6b:05:61:bc:73:9e was issued on by Amazon.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=a-ue1.mydomaine.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 06:87:b3:5e:61:85:86:8e:b2:63:6b:05:61:bc:73:9e
Serial Number (int): 8679966079559495473207895495297233822
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: af:7b:7a:0b:f1:aa:7d:c8:f2:ec:48:75:a5:42:ed:5a:03:e1:c9:97
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 0e:91:97:66:ba:f3:e6:e5:8d:8d:3b:27:10:03:60:4f:c6:43:5f:62
Fingerprint (sha256): de:d5:58:ae:da:ab:96:87:58:83:fb:8d:15:1c:f8:0e:c5:5c:50:2f:68:00:44:34:47:2b:5f:a2:b7:b1:0d:75

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate a-ue1.mydomaine.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for a-ue1.mydomaine.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

a-ue1.mydomaine.com
*.shape.com
*.allrecipes.com
a-ue1.southernliving.com
*.woodmagazine.com
*.ddmapps.com
*.dotdashmeredith.com
dotdashmeredith.com
*.a-ue1.marthastewart.com
*.a-ue1.eatingwell.com
*.peopleenespanol.com
allrecipes.com
*.a-ue1.ew.com
a-ue1.realsimple.com
*.a-ue1.realsimple.com
southernliving.com
midwestliving.com
mydomaine.com
*.a-ue1.shape.com
*.southernliving.com
*.a-ue1.southernliving.com
a-ue1.ddmapps.com
*.instyle.com
*.bhg.com
a-ue1.marthastewart.com
investopedia.com
*.dailypaws.com
*.mydomaine.com
*.a-ue1.dotdashmeredith.com
carbonmakesdiamonds.com
*.a-ue1.ddmapps.com
ddmapps.com
*.seriouseats.com
*.simplyrecipes.com
*.a-ue1.peopleenespanol.com
thebalancemoney.com
*.a-ue1.bhg.com
*.a-ue1.carbonmakesdiamonds.com
*.foodandwine.com
*.a-ue1.agriculture.com
*.a-ue1.midwestliving.com
a-ue1.simplyrecipes.com
dailypaws.com
a-ue1.eatingwell.com
myrecipes.com
a-ue1.bhg.com
a-ue1.shape.com
*.myrecipes.com
*.agriculture.com
woodmagazine.com
*.a-ue1.myrecipes.com
*.a-ue1.thebalancemoney.com
*.allpeoplequilt.com
*.a-ue1.investopedia.com
*.a-ue1.allrecipes.com
a-ue1.myrecipes.com
shape.com
*.realsimple.com
*.eatingwell.com
a-ue1.ew.com
*.a-ue1.instyle.com
agriculture.com
a-ue1.foodandwine.com
a-ue1.seriouseats.com
bhg.com
a-ue1.instyle.com
a-ue1.allpeoplequilt.com
*.a-ue1.foodandwine.com
*.a-ue1.seriouseats.com
*.a-ue1.woodmagazine.com
a-ue1.carbonmakesdiamonds.com
eatingwell.com
a-ue1.woodmagazine.com
*.a-ue1.allpeoplequilt.com
*.a-ue1.dailypaws.com
realsimple.com
ew.com
a-ue1.thebalancemoney.com
*.marthastewart.com
*.thebalancemoney.com
*.carbonmakesdiamonds.com
simplyrecipes.com
*.ew.com
a-ue1.peopleenespanol.com
a-ue1.midwestliving.com
marthastewart.com
*.midwestliving.com
a-ue1.dailypaws.com
instyle.com
*.a-ue1.mydomaine.com
a-ue1.allrecipes.com
peopleenespanol.com
foodandwine.com
a-ue1.dotdashmeredith.com
*.investopedia.com
a-ue1.investopedia.com
allpeoplequilt.com
a-ue1.agriculture.com
*.a-ue1.simplyrecipes.com
seriouseats.com

Other certificates including the domain name mydomaine.com

(limited to 100 certificates)
k2.shared.global.fastly.net
dotdash.map.fastly.net
continual.app.prod.aws.byrdie.com
k2.shared.global.fastly.net
continual.app.qa.aws.byrdie.com
persistent.app.qa.aws.byrdie.com
dotdash.map.fastly.net
pe-adhoc-5.app.qa.aws.byrdie.com
pe-batch.app.qa.aws.byrdie.com
a-ue1.mydomaine.com
dotdash.map.fastly.net
local.dotdash.com
k2.shared.global.fastly.net
disposable.app.qa.aws.byrdie.com
k2.shared.global.fastly.net
persistent.app.qa.aws.byrdie.com
k2.shared.global.fastly.net
k2.shared.global.fastly.net
k2.shared.global.fastly.net
local.dotdash.com
continual.app.qa.aws.byrdie.com
continual.app.prod.aws.byrdie.com
local.dotdash.com
k2.shared.global.fastly.net
k2.shared.global.fastly.net
disposable.app.qa.aws.byrdie.com
persistent.app.qa.aws.byrdie.com
mydomaine.com
pe-btch.app.qa.aws.byrdie.com
local.dotdash.com
k2.shared.global.fastly.net
continual.app.prod.aws.byrdie.com
pe.app.qa.aws.byrdie.com
dotdash.map.fastly.net
continual.app.prod.aws.byrdie.com
byrdie.com
k2.shared.global.fastly.net
k2.shared.global.fastly.net
continual.app.qa.aws.byrdie.com
local.dotdash.com
continual.app.prod.aws.byrdie.com
k2.shared.global.fastly.net
disposable.app.qa.aws.byrdie.com
local.dotdash.com
dotdash.map.fastly.net
k2.shared.global.fastly.net
pe-adhoc-3.app.qa.aws.byrdie.com
k2.shared.global.fastly.net
persistent.app.qa.aws.byrdie.com
k2.shared.global.fastly.net
a-uw2.mydomaine.com
k2.shared.global.fastly.net
continual.app.qa.aws.byrdie.com
a-ue1.mydomaine.com
continual.app.prod.aws.byrdie.com
link.mydomaine.com
mydomaine.com
link.mydomaine.com
k2.shared.global.fastly.net
k2.shared.global.fastly.net
k2.shared.global.fastly.net
local.dotdash.com
continual.app.prod.aws.byrdie.com
k2.shared.global.fastly.net
local.dotdash.com
local.dotdash.com
continual.app.qa.aws.byrdie.com
k2.shared.global.fastly.net
*.whowhatwear.com
continual.app.prod.aws.byrdie.com
k2.shared.global.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
k2.shared.global.fastly.net
newsletter.mydomaine.com
k2.shared.global.fastly.net
a-ue1.mydomaine.com
k2.shared.global.fastly.net
continual.app.qa.aws.byrdie.com
pe-adhoc-3.app.qa.aws.byrdie.com
k2.shared.global.fastly.net
dotdash.map.fastly.net
k2.shared.global.fastly.net
dotdash.map.fastly.net
k2.shared.global.fastly.net
newsletter.mydomaine.com
k2.shared.global.fastly.net
*.whowhatwear.com
mydomaine.com
local.dotdash.com
mail.thespruce.com
k2.shared.global.fastly.net
newsletter.mydomaine.com
k2.shared.global.fastly.net
dotdash.map.fastly.net
links.allrecipes.com
dotdash.map.fastly.net
persistent.app.qa.aws.byrdie.com
k2.shared.global.fastly.net
k2.shared.global.fastly.net

Certificate

The complete raw certificate details for a-ue1.mydomaine.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6uldOs0GXrmWWHfTM052
soma/D+Rn/6/vwPUYVKBbgNn1Lz7CNfWYn2fVZ4gZR1UAXMCq70FG9AsFrdvWgCM
TwoK3+jSbBqHw5MSvetK1gYHxdRzZ6HDkXw1Ehi+AIXqgZyCrBjiw0iWytc7D4G2
Sr9hUW5LieBy5ulkszzplqUqEFNuJAVs5Jg78AdqPxC9A03HBncTWLgFPcTrCkSP
E2T63o5sOjkA5df8rM0QQK7adVAFqxOxd+yoRq0G77JZ7Qm2vhjK1RGZ9XcDCMIA
DcxXn2dUhKAaL8BJFwRzXMq5/BBzqX59kLDhueFkWMJBx3VdrkZWu2UqW8B8L2Tt
AQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8679966079559495473207895495297233822
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-30 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-06-28 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'a-ue1.mydomaine.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29654839527413722848899334244080651905817940606058927591108612718447240672736459203757599214604966945925189380209280011754827858462736834768626212843466369313591725730915744173440192755237315296080335633422424509351316012993255468133011889541889940097370390616854382336153286354893046612984758835819509608981581847132935286641258552202300937494605247582213331267802035263842165789351078076356071204373184173124513014812976651896016933717859803189157858163073692510906259407818248859615609971425585237973322055890268082516593817188872334254550248040464802557752692441355791865003987230308813094372781180222257062276353
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							af7b7a0bf1aa7dc8f2ec4875a542ed5a03e1c997
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2080 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a-ue1.mydomaine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shape.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.allrecipes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a-ue1.southernliving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.woodmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ddmapps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dotdashmeredith.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dotdashmeredith.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.a-ue1.marthastewart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.a-ue1.eatingwell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.peopleenespanol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allrecipes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.a-ue1.ew.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a-ue1.realsimple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.a-ue1.realsimple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southernliving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'midwestliving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mydomaine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.a-ue1.shape.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.southernliving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.a-ue1.southernliving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a-ue1.ddmapps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.instyle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bhg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a-ue1.marthastewart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investopedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dailypaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mydomaine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.a-ue1.dotdashmeredith.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carbonmakesdiamonds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.a-ue1.ddmapps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ddmapps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.seriouseats.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.simplyrecipes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.a-ue1.peopleenespanol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thebalancemoney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.a-ue1.bhg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.a-ue1.carbonmakesdiamonds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.foodandwine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.a-ue1.agriculture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.a-ue1.midwestliving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a-ue1.simplyrecipes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dailypaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a-ue1.eatingwell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myrecipes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a-ue1.bhg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a-ue1.shape.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myrecipes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.agriculture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'woodmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.a-ue1.myrecipes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.a-ue1.thebalancemoney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.allpeoplequilt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.a-ue1.investopedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.a-ue1.allrecipes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a-ue1.myrecipes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shape.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.realsimple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eatingwell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a-ue1.ew.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.a-ue1.instyle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agriculture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a-ue1.foodandwine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a-ue1.seriouseats.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bhg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a-ue1.instyle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a-ue1.allpeoplequilt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.a-ue1.foodandwine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.a-ue1.seriouseats.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.a-ue1.woodmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a-ue1.carbonmakesdiamonds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eatingwell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a-ue1.woodmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.a-ue1.allpeoplequilt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.a-ue1.dailypaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'realsimple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ew.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a-ue1.thebalancemoney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.marthastewart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thebalancemoney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carbonmakesdiamonds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simplyrecipes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ew.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a-ue1.peopleenespanol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a-ue1.midwestliving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marthastewart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.midwestliving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a-ue1.dailypaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'instyle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.a-ue1.mydomaine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a-ue1.allrecipes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peopleenespanol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foodandwine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a-ue1.dotdashmeredith.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.investopedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a-ue1.investopedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allpeoplequilt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a-ue1.agriculture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.a-ue1.simplyrecipes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seriouseats.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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