secure.meredith.com

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 08:6d:ea:0c:a4:ff:c4:eb:88:c4:bb:a2:af:b5:cc:7f was issued on by Amazon.

With 43 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=secure.meredith.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 08:6d:ea:0c:a4:ff:c4:eb:88:c4:bb:a2:af:b5:cc:7f
Serial Number (int): 11204531409509575480164565036077272191
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: af:b1:c7:d1:43:74:4c:57:00:56:46:6c:b6:23:09:e2:1d:98:53:2e
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 5a:62:52:56:6b:6a:89:3a:8f:04:c0:56:14:9d:de:02:67:dc:2c:74
Fingerprint (sha256): e0:4c:49:02:ef:db:67:8b:b8:c3:59:0b:36:8a:22:49:83:d1:4e:06:b3:bd:22:49:be:a2:d4:c3:68:db:fb:16

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate secure.meredith.com

43

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for secure.meredith.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

secure.meredith.com
secure.peopleenespanol.com
secure.ew.com
secure.livingthecountrylife.com
secure.coastalliving.com
secure.midwestliving.com
secure.instyle.com
secure.familycircle.com
secure.diabeticlivingonline.com
secure.allrecipesmagazine.com
www.magazine.store
www.meredithcsa.com
secure.marthastewartweddings.com
secure.foodandwine.com
secure.eatingwell.com
secure.travelmeredith.com
magazine.store
secure.fitnessmagazine.com
secure.health.com
secure.fitpregnancy.com
secure.realsimple.com
secure.travelandleisure.com
secure.southernliving.com
secure.mdp.allrecipes.com
secure.entertainmentweekly.com
secure.recipe.com
secure.myrecipes.com
secure.woodmagazine.com
secure.bhg.com
secure.lhj.com
secure.child.com
secure.people.com
secure.marthastewart.com
secure.parenting.com
cr-iframe.magazine.store
secure.cookinglight.com
secure.magazine.store
secure.agriculture.com
secure.traditionalhome.com
secure.shape.com
secure.divinecaroline.com
secure.parents.com
secure.allpeoplequilt.com

Other certificates including the domain name meredith.com

(limited to 100 certificates)
wpm.ccmp.eu
payments.meredith.com
vcacontent.meredith.com
secure.meredith.com
dyncat.cip.meredith.com
*.meredith.com
secure.static.meredith.com
*.secure.meredith.com
secure.meredith.com
matrixdev.meredith.com
meredith.com
*.meredith.com
my.meredith.com
test.secure.static.meredith.com
meredith.com
images.meredith.com
citrix.meredith.com
wpm03.eccmp.com
*.meredith.com
5713573250596864-fe4.pantheonsite.io
images.meredith.com
munkireport.meredith.com
payments.meredith.com
meredith.com
woodwing.meredith.com
secure.static.meredith.com
*.meredith.com
es.meredith.com
*.woodwing.meredith.com
kptvoasis.meredith.com
www.meredith.com
webmail.meredith.com
wpm.ccmp.eu
specialoffers.meredith.com
splunk.meredith.com
secure.static.meredith.com
wpm03.eccmp.com
intranet.meredith.com
akamai-san192.exacttarget.com
secure.meredith.com
wpm.ccmp.eu
*.meredith.com
360.meredith.com
wpm.ccmp.eu
*.images.meredith.com
quizler.meredith.com
chrysler-stg.meredith.com
Dashboards.meredith.com
*.agriculture.com
dev.app.meredith.com
adobefrl.meredith.com
collabedge.meredith.com
go.meredith.com
dev.secure.meredith.com
*.meredith.com
5713573250596864-fe4.pantheonsite.io
*.meredith.com
*.meredith.com
360-auth.meredith.com
wpm03.eccmp.com
*.meredith.com
images.qa.shopnation.com
ise.meredith.com
wpm.ccmp.eu
secure.static.meredith.com
secure.meredith.com
images.meredith.com
assets.meredith.com
*.elvis.meredith.com
accounts.bhg.com
accounts.bhg.com
*.meredith.com
*.meredith.com
LCS.MEREDITH.COM
5713573250596864-fe4.pantheonsite.io
5713573250596864-fe4.pantheonsite.io
wpm03.eccmp.com
*.elvis.meredith.com
origin-secure.meredith.com
secure.meredith.com
mywedding.com
origin-dev.secure.meredith.com
secure.meredith.com
admin-dev.meredith.com
mywedding.com
www.meredith.com
meredith.com
dev-theshop.meredith.com
mdp.api.meredith.com
wpm.ccmp.eu
secure.meredith.com
accounts.bhg.com
*.meredith.com
*.meredith.com
*.meredith.com
images.meredith.com
meredith.com
*.meredith.com
wpm03.eccmp.com
images.meredith.com

Certificate

The complete raw certificate details for secure.meredith.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIJyzCCCLOgAwIBAgIQCG3qDKT/xOuIxLuir7XMfzANBgkqhkiG9w0BAQsFADA8
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g
UlNBIDIwNDggTTAyMB4XDTIzMTAwNDAwMDAwMFoXDTI0MTEwMjIzNTk1OVowHjEc
MBoGA1UEAxMTc2VjdXJlLm1lcmVkaXRoLmNvbTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKlTyRjUh9BImj5Qnej2VqfYF/zkRPPPIkwh+3RMYBiTM8vH
vLkU5aMNmI+glepsbUurW9nDfiGNU8MXzdRa84oUtzXWUPah7XB3croVf4+YqBNX
Kyf0fsJU4JC12Y+7N5FpVSUEfE5fw7pD1lztLY+eCfTnPd8NQ1NAZB42Bhyn8fBe
z5HbJ3EijbMxlLvL64ldor8Ppg5jiZ9WU4pzbMARCq0G0b/6N93fNk0a9wuTxcFl
7C85lrBt/uNUXRymknq26lvERgK49Nrz76mPtlPTolc/gwpzo0HPxbicVFCziz1t
If/WsiVmvmS3uRWi+wqnjKyZxSI5ULFbWqjcBIMCAwEAAaOCBuUwggbhMB8GA1Ud
IwQYMBaAFMAxUs1aUMOCfHRxzsvpnPl664LiMB0GA1UdDgQWBBSvscfRQ3RMVwBW
Rmy2IwniHZhTLjCCBBcGA1UdEQSCBA4wggQKghNzZWN1cmUubWVyZWRpdGguY29t
ghpzZWN1cmUucGVvcGxlZW5lc3Bhbm9sLmNvbYINc2VjdXJlLmV3LmNvbYIfc2Vj
dXJlLmxpdmluZ3RoZWNvdW50cnlsaWZlLmNvbYIYc2VjdXJlLmNvYXN0YWxsaXZp
bmcuY29tghhzZWN1cmUubWlkd2VzdGxpdmluZy5jb22CEnNlY3VyZS5pbnN0eWxl
LmNvbYIXc2VjdXJlLmZhbWlseWNpcmNsZS5jb22CH3NlY3VyZS5kaWFiZXRpY2xp
dmluZ29ubGluZS5jb22CHXNlY3VyZS5hbGxyZWNpcGVzbWFnYXppbmUuY29tghJ3
d3cubWFnYXppbmUuc3RvcmWCE3d3dy5tZXJlZGl0aGNzYS5jb22CIHNlY3VyZS5t
YXJ0aGFzdGV3YXJ0d2VkZGluZ3MuY29tghZzZWN1cmUuZm9vZGFuZHdpbmUuY29t
ghVzZWN1cmUuZWF0aW5nd2VsbC5jb22CGXNlY3VyZS50cmF2ZWxtZXJlZGl0aC5j
b22CDm1hZ2F6aW5lLnN0b3JlghpzZWN1cmUuZml0bmVzc21hZ2F6aW5lLmNvbYIR
c2VjdXJlLmhlYWx0aC5jb22CF3NlY3VyZS5maXRwcmVnbmFuY3kuY29tghVzZWN1
cmUucmVhbHNpbXBsZS5jb22CG3NlY3VyZS50cmF2ZWxhbmRsZWlzdXJlLmNvbYIZ
c2VjdXJlLnNvdXRoZXJubGl2aW5nLmNvbYIZc2VjdXJlLm1kcC5hbGxyZWNpcGVz
LmNvbYIec2VjdXJlLmVudGVydGFpbm1lbnR3ZWVrbHkuY29tghFzZWN1cmUucmVj
aXBlLmNvbYIUc2VjdXJlLm15cmVjaXBlcy5jb22CF3NlY3VyZS53b29kbWFnYXpp
bmUuY29tgg5zZWN1cmUuYmhnLmNvbYIOc2VjdXJlLmxoai5jb22CEHNlY3VyZS5j
aGlsZC5jb22CEXNlY3VyZS5wZW9wbGUuY29tghhzZWN1cmUubWFydGhhc3Rld2Fy
dC5jb22CFHNlY3VyZS5wYXJlbnRpbmcuY29tghhjci1pZnJhbWUubWFnYXppbmUu
c3RvcmWCF3NlY3VyZS5jb29raW5nbGlnaHQuY29tghVzZWN1cmUubWFnYXppbmUu
c3RvcmWCFnNlY3VyZS5hZ3JpY3VsdHVyZS5jb22CGnNlY3VyZS50cmFkaXRpb25h
bGhvbWUuY29tghBzZWN1cmUuc2hhcGUuY29tghlzZWN1cmUuZGl2aW5lY2Fyb2xp
bmUuY29tghJzZWN1cmUucGFyZW50cy5jb22CGXNlY3VyZS5hbGxwZW9wbGVxdWls
dC5jb20wEwYDVR0gBAwwCjAIBgZngQwBAgEwDgYDVR0PAQH/BAQDAgWgMB0GA1Ud
JQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA7BgNVHR8ENDAyMDCgLqAshipodHRw
Oi8vY3JsLnIybTAyLmFtYXpvbnRydXN0LmNvbS9yMm0wMi5jcmwwdQYIKwYBBQUH
AQEEaTBnMC0GCCsGAQUFBzABhiFodHRwOi8vb2NzcC5yMm0wMi5hbWF6b250cnVz
dC5jb20wNgYIKwYBBQUHMAKGKmh0dHA6Ly9jcnQucjJtMDIuYW1hem9udHJ1c3Qu
Y29tL3IybTAyLmNlcjAMBgNVHRMBAf8EAjAAMIIBfAYKKwYBBAHWeQIEAgSCAWwE
ggFoAWYAdQB2/4g/Crb7lVHCYcz1h7o0tKTNuyncaEIKn+ZnTFo6dAAAAYr4E1vb
AAAEAwBGMEQCIHWLo6pMGsZc8FQIPV097g+R1qtoO240kYXQHnjDhwF1AiBmfv9T
AVvKkFmM5UgCeVlui6ghMHTQ/VBCribUbueJTQB1AEiw42vapkc0D+VqAvqdMOsc
UgHLVt0sgdm7v6s52IRzAAABivgTW78AAAQDAEYwRAIgSRixEbZyX3rlYOPXRIFJ
HZnyumUM+2ADsgOFTPxL6PMCIF3TXCw0Tueg8C19cQXbpbOZ3cUmtKvEJv4Z/HlJ
AB7PAHYA2ra/az+1tiKfm8K7XGvocJFxbLtRhIU0vaQ9MEjX+6sAAAGK+BNbegAA
BAMARzBFAiB2zP9Hd5xGJjQZEW2xMZV8Bnpq5x6oIqh7vRrXd+u1GAIhAO9XtnhS
0VZyZzCTxEhuKz8g6kXWOIh5IbtSW4ncgYXjMA0GCSqGSIb3DQEBCwUAA4IBAQBW
WaPya1dDTDdnqizVqVng5C675rpMzXTdojCNBZ9pxFD0JAZQ1wjwMhpmEaRkSl3d
Td1sdM+dqOWLgDg1xW03w/gAFwsViJm5UhkGCQsM8zMZN4Q5/Ydq+VCR+iGNGtrX
C+uFDhcEjZJTNvwXcdtKOVvRBUy47SybIFJM9ZvDusVafQU1PtV9mESyhHZXPRJ/
Hyy32ZEtIRCW79Roq10NBWbhqf4YQo9KlvDEcVspPbHvLXbScBOEeOjjKbqd08WZ
PkIu51YvVVozZlEhBV1c22GjUoav6AQoVl1cg4ydZ9ClqViStoLdxc7JKJ8+HKzK
PVuOlzxxtpqchkpuW+LW
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVPJGNSH0EiaPlCd6PZW
p9gX/ORE888iTCH7dExgGJMzy8e8uRTlow2Yj6CV6mxtS6tb2cN+IY1TwxfN1Frz
ihS3NdZQ9qHtcHdyuhV/j5ioE1crJ/R+wlTgkLXZj7s3kWlVJQR8Tl/DukPWXO0t
j54J9Oc93w1DU0BkHjYGHKfx8F7PkdsncSKNszGUu8vriV2ivw+mDmOJn1ZTinNs
wBEKrQbRv/o33d82TRr3C5PFwWXsLzmWsG3+41RdHKaSerbqW8RGArj02vPvqY+2
U9OiVz+DCnOjQc/FuJxUULOLPW0h/9ayJWa+ZLe5FaL7CqeMrJnFIjlQsVtaqNwE
gwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11204531409509575480164565036077272191
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-04 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-11-02 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'secure.meredith.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21375589726511277369658811743795314623602373398431851141848574225828617765213410602535160769444897227601392617772858775912164122355158032028167879274466220743001820512800890962109120845313418640150433993683163109426557777703883209568653967390158714428367072524656303748147809638049804195227800749511459176184479307791462120102953563531853868428810770870678079415529705731487310087631428205179428193072432143703573023079990464658498971995459405745657089513299705739476912592723109140340613064052472407906856749350277430635666699406297739271992279039801271189786658248291399186893626509002962011338078458793154613871747
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							afb1c7d143744c570056466cb62309e21d98532e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1038 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.meredith.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.peopleenespanol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.ew.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.livingthecountrylife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.coastalliving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.midwestliving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.instyle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.familycircle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.diabeticlivingonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.allrecipesmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.magazine.store'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.meredithcsa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.marthastewartweddings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.foodandwine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.eatingwell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.travelmeredith.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.store'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.fitnessmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.health.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.fitpregnancy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.realsimple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.travelandleisure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.southernliving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mdp.allrecipes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.entertainmentweekly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.recipe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.myrecipes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.woodmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.bhg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.lhj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.child.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.people.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.marthastewart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.parenting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cr-iframe.magazine.store'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.cookinglight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.magazine.store'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.agriculture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.traditionalhome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.shape.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.divinecaroline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.parents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.allpeoplequilt.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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