dotdash.map.fastly.net

- Fastly, Inc. -

Issued by GlobalSign CloudSSL CA - SHA256 - G3

About this certificate

This digital certificate with serial number 2f:3d:53:83:ae:4f:59:c8:38:62:71:1b was issued on by GlobalSign nv-sa.

With 68 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Fastly, Inc.

Organization: Fastly, Inc.
State / Province: California
Locality: San Francisco
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 2f:3d:53:83:ae:4f:59:c8:38:62:71:1b
Serial Number (int): 14619934322101619048459694363
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: ab:ec:b4:56:6c:cf:f3:44:e7:d0:3d:d6:d1:dc:cc:f7:40:f2:4e:de
AuthorityKeyId: a9:2b:87:e1:ce:24:47:3b:1b:bf:cf:85:37:02:55:9d:0d:94:58:e6

Fingerprint (sha1): 32:16:f4:8a:e5:77:7c:29:75:19:3b:77:a3:8a:9c:15:03:d3:ef:4c
Fingerprint (sha256): ed:ae:ca:ab:19:e6:0e:86:47:23:97:63:69:3a:db:de:53:5d:21:69:c0:de:1e:af:8c:b9:6d:f8:44:89:de:37

Issuing Certificate URL: http://secure.globalsign.com/cacert/cloudsslsha2g3.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/cloudsslsha2g3

Check the revocation status for certificate dotdash.map.fastly.net

68

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dotdash.map.fastly.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dotdash.map.fastly.net
*.about.com
*.aboutespanol.com
*.academy.investopedia.com
*.advisorinsights.com
*.babynames.net
*.brides.com
*.bridesmagazine.co.uk
*.byrdie.com
*.caloriecount.com
*.dotdash.com
*.forwardco.com
*.investopedia.com
*.learnreligions.com
*.lifewire.com
*.liveabout.com
*.mydomaine.com
*.private.use1.staging.investopedia.com
*.qa.aws.dotdash.com
*.rothira.com
*.seo.aws.about.com
*.thebalance.com
*.thebalancecareers.com
*.thebalanceeveryday.com
*.thebalancesmb.com
*.thespruce.com
*.thesprucecrafts.com
*.thespruceeats.com
*.thesprucepets.com
*.thoughtco.com
*.tqn.com
*.tripsavvy.com
*.verywell.com
*.verywellfamily.com
*.verywellfit.com
*.verywellhealth.com
*.verywellmind.com
about.com
aboutespanol.com
advisorinsights.com
babynames.net
brides.com
bridesmagazine.co.uk
byrdie.com
caloriecount.com
dotdash.com
forwardco.com
investopedia.com
learnreligions.com
lifewire.com
liveabout.com
mydomaine.com
rothira.com
thebalance.com
thebalancecareers.com
thebalanceeveryday.com
thebalancesmb.com
thespruce.com
thesprucecrafts.com
thespruceeats.com
thesprucepets.com
thoughtco.com
tripsavvy.com
verywell.com
verywellfamily.com
verywellfit.com
verywellhealth.com
verywellmind.com

Other certificates including the domain name dotdash.map.fastly.net

(limited to 100 certificates)
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net

Certificate

The complete raw certificate details for dotdash.map.fastly.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxhWZkLPAXMA8KaRklrZh
cNGybSzritw1Q9MPjwD2KngRWmpX+iLTf1EWjEJxQSmjRGmY4Qy54rPIjZ1ZT5WX
6VSyPfjy5WXqkiaCdE5SZQ/nF3muANphMhsy5zALDxgvlwF1A6HAiyMH7WK37fTT
yI2eNYbexkxAq3WzGovknZCcv/BeSdAbY7tlJA68NatZse91ccUHAMemOWyhbZBC
nr/rHJoGdRzGLl8smnoPLIiRLJAi9wTUZBYOSS3Byn53nz1UP01MDRDuyl7+hzDk
td5KfB/GknR1uhCGpioU7UEvQIRvFPnmZ2lO37b3pxJX6eW+MKeeJbHNQoKLUeht
FwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14619934322101619048459694363
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign CloudSSL CA - SHA256 - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-08 19:08:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-17 22:28:15 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Fastly, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'dotdash.map.fastly.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25005835673310260694825759824346529413291052709620083183952507344083454457187313715019939818509831799427928911886904908428005555010810061489970628593612219795279154029028531910380835633030394562119260338615704443728550163090203278724143281663473093962411958503276242816407067514432438204764779863730106720542029889224891520710146414977525238743307228580997300060562165099686312578628688996634408589440967326800525116552300590243028911330809672418671298098151356514409046159749267003683417225198616285586001797226672678958511549386190026081069059741037941729847850978760128186541973222336326739249172684725720015465751
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/cloudsslsha2g3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/cloudsslsha2g3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1267 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dotdash.map.fastly.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.about.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aboutespanol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.academy.investopedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.advisorinsights.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.babynames.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brides.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bridesmagazine.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.byrdie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.caloriecount.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dotdash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.forwardco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.investopedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.learnreligions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lifewire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.liveabout.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mydomaine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.private.use1.staging.investopedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qa.aws.dotdash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rothira.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.seo.aws.about.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thebalance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thebalancecareers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thebalanceeveryday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thebalancesmb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thespruce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thesprucecrafts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thespruceeats.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thesprucepets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thoughtco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tqn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tripsavvy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.verywell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.verywellfamily.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.verywellfit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.verywellhealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.verywellmind.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'about.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aboutespanol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advisorinsights.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'babynames.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brides.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bridesmagazine.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'byrdie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caloriecount.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dotdash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forwardco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investopedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'learnreligions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lifewire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liveabout.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mydomaine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rothira.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thebalance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thebalancecareers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thebalanceeveryday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thebalancesmb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thespruce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thesprucecrafts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thespruceeats.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thesprucepets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thoughtco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tripsavvy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verywell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verywellfamily.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verywellfit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verywellhealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verywellmind.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a92b87e1ce24473b1bbfcf853702559d0d9458e6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							abecb4566ccff344e7d03dd6d1dcccf740f24ede
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016dacc5a6260000040300463044022034301a0a1f619384c64cd9b1c621c601d1ed33d7125cebd477e04b84718b11b5022034f464ae280334033772d788f44004f04a960701fe7ffe1d5c9fdba797a77c94007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016dacc5a5da000004030047304502210096957345e8797a3c60b2003fdcbef3f6cc3b1980d6fb5518f801780c391bbd98022039d713a79cf0c6167788c8645c2e194a5ee9e340e375c1f29e427c04a232c8a2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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