support3.cdnetworks.net

- CDNetworks Inc. -

Issued by DigiCert SHA2 High Assurance Server CA

About this certificate

This digital certificate with serial number 09:fe:bb:4c:4e:73:db:f2:a7:f9:6b:f0:ba:2c:58:cf was issued on by DigiCert Inc.

With 326 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

CDNetworks Inc.

Organization: CDNetworks Inc.
State / Province: California
Locality: Campbell
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 09:fe:bb:4c:4e:73:db:f2:a7:f9:6b:f0:ba:2c:58:cf
Serial Number (int): 13285694220348218930036181016307849423
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 6a:f8:e5:b9:cb:07:d9:84:3a:67:42:03:6e:ec:12:53:c4:ec:b3:5e
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b

Fingerprint (sha1): 6b:05:87:f1:91:3d:44:e2:a1:d9:e6:7c:df:57:49:6a:0c:cf:ca:50
Fingerprint (sha256): 04:22:85:c5:2a:be:b5:d8:e0:14:31:ab:06:ba:d1:80:a2:1d:71:70:c4:a6:82:fe:e1:dc:5d:86:68:b0:c9:de

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g6.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g6.crl

Check the revocation status for certificate support3.cdnetworks.net

326

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for support3.cdnetworks.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

support3.cdnetworks.net
i1.daumcdn.net
s1.daumcdn.net
cdn.us.confirmit.com
cdn.euro.confirmit.com
www.riverisland.com
www.riverisland.fr
eu.riverisland.com
au.riverisland.com
content1.riverisland.com
content1-us.riverisland.com
content1.riverisland.fr
us.riverisland.com
www.shanghai-rishizhengxing.com
gdssl.image-gmkt.com
staticssl.image-gmkt.com
gdssl.image-qoo10.cn
staticssl.image-qoo10.cn
sso.pokemon.com
www.pokemon.com
qsm.qoo10.cn
india.korean-culture.org
pg.qoo10.com
cache.theoutnet.com
cache.net-a-porter.com
adserver.iminent.com
iminentapi.pantherssl.com
www.commscope.com
pg-cloud.qbox.me
pg-static.qbox.me
p-official.line-apps.com
www.patek.com
ciapi.cityindex.com
richmedia-cdn.localstars.com
www.learndirect.com
learning.learndirect.co.uk
access.learndirect.co.uk
m1.daumcdn.net
fonts.ncwest.ncsoft.com
script.image-gmkt.com
simg.gpotato.com
static.gpotato.com
script.image-qoo10.cn
www.learndirect.co.uk
pgw.glbpay.com
homedepot.colorsmartbybehr.com
admin.qoo10.cn
mypi1.daumcdn.net
www.sslpaygate.com
mypi2.daumcdn.net
mypi3.daumcdn.net
mypi4.daumcdn.net
static.homepackbuzz.com
r.homepackbuzz.com
www.scottdunn.com
app.gomasterkey.com
cdn.gomasterkey.com
reportbuilder.gomasterkey.com
cfg.cdngp.net
clients.etxcapital.com
trade.etxcapital.com
cdn.monecor.com
static-ad.homepackbuzz.com
swupdate.bang-olufsen.com
eu.static.webzen.com
us.static.webzen.com
ssp.scottdunn.com
dsifiles.dsisystemsinc.com
secure.ctb988.net
secure.ctb988.com
www.riverisland.de
encoding.image-gmkt.com
res-hg.voomga.com
webmail.lk777.net
www.quick-payment.com
dpssl.image-gmkt.com
dpssl.image-qoo10.cn
cnimage.wemakeprice.com
cnimage2.wemakeprice.com
ds.gscasino.com
cdn.confirmit.com.au
justin1.cdnetworks.net
www.riverisland.se
content1.riverisland.se
www.stockpair.com
www.stockpair.net
girdle-assets.net-a-porter.com
ssl.instarekber.com
login.instarekber.com
ssl-h5.instarekber.com
ssl-static.instarekber.com
www.awok.com
www.sulwhasoo.com
nap-locale-info.nap-live.ext.net-a-porter.com
cdn-ph.zeemee.com
cdn-0.zeemee.com
cdn-vd.zeemee.com
www.zeemee.com
www.riverisland.nl
content1.riverisland.nl
www.ryohair.com
cachebanner.williamhillcasino.com
rtc-exp.co-exprise.net
test.ariston-net.remotethermo.com
www.ariston-net.remotethermo.com
www.ariston-net.remotethermo.com.gccdn.net
test.ariston-net.remotethermo.com.gccdn.net
nap-assets.nap-live.ext.net-a-porter.com
flash.net-a-porter.com
video.net-a-porter.com
video.theoutnet.com
www.comprame.com
binary.etxcapital.com
cwe.learndirect.co.uk
www.laneige.com
www.stockpair.biz
www.stockpair.ru
dv.groupeadeo.com
www.boutique.weldom.fr
*.ssltest.cdnga.net
*.co-exprise.com
*.directworks.com
waf.leroymerlin.fr
showroom.amorepacifictravelretail.cn
content.gomasterkey.com
desa.doracdn.com
qaexp1.directworks.com
cachebanner.williamhill-casino.com
stjp.image-gmkt.com
stsg.image-gmkt.com
stmy.image-gmkt.com
stid.image-gmkt.com
stcom.image-gmkt.com
sthk.image-gmkt.com
chinese.visitseoul.net
tchinese.visitseoul.net
english.visitseoul.net
japanese.visitseoul.net
korean.visitseoul.net
tid.cc.nhnst.com
img1.smdutyfree.com
assets.geilicdn.com
wd.geilicdn.com
www.pokemontcg.com
passthrough-sso-tcg.cdnga.net
www.stockpair.capital
cdn-test.iope.com
www.iope.com
fluid-adverts.localstars.com
club.pokemon.com
gd.image-gmkt.com
dp.image-gmkt.com
gdetail.image-gmkt.com
static.image-gmkt.com
images.toast.com
www.ducotedechezvous.com
cdn.ducotedechezvous.com
s1.dcdcvcdn.com
s2.dcdcvcdn.com
img.app.meitudata.com
cachebanner.williamhill-casino-club.com
www.mamonde.com
md.proty.re
img.geilicdn.com
vn.innisfree.com
comicoth2-apis.krp.acc.toastoven.net
api-log-analytics.cloud.acc.toastoven.net
id.payco.acc.toastoven.net
*.supergaminator-download.com
preprod.bricoman.fr
uat1.riuat.com
cachebanner.williamhillcasino.reviews
audio.geilicdn.com
cachebanner.williamhillcasino.review
nexteerqaexp.directworks.com
www.verite.co.kr
www.osulloc.com
idacc.payco.com
preprod.supplier.adeo.com
supplier.adeo.com
www.hera.com
www.bricoman.fr
www.ripreprod.com
content1.ripreprod.com
content1-uat1.riuat.com
hk.innisfree.com
sg.innisfree.com
my.innisfree.com
th.innisfree.com
tw.innisfree.com
in.innisfree.com
id.innisfree.com
www.weldom.fr
nantes.bricoman.fr
si.geilicdn.com
www.amorepacific.com
preprod-broker.iot.leroymerlin.fr
preprod-partners.iot.leroymerlin.fr
preprod-enki-backend.iot.leroymerlin.fr
ppp.partners.iot.leroymerlin.fr
www.ur-browser.com
talentia.bricocenter.it
borgwarnerqaexp.directworks.com
www.tikamoon.com
www.statcounter.com
secure.statcounter.com
www.visitseoul.net
oaa.leroymerlin.fr
abridejardinmodulab.leroymerlin.fr
configurateur.leroymerlin.fr
cuisine3d.leroymerlin.fr
meublesdb.leroymerlin.fr
oaahome.leroymerlin.fr
portedeplacard.leroymerlin.fr
portedeplacard-sim.leroymerlin.fr
proxymove.leroymerlin.fr
sdb3d.leroymerlin.fr
oaarangementsurmesure.leroymerlin.fr
fenetresurmesure.leroymerlin.fr
api.leroymerlin.fr
servicesv3.leroymerlin.fr
sso.leroymerlin.fr
www.mediaworld.it
m1.dcdcvcdn.com
m2.dcdcvcdn.com
cdn-shopify-com.gccdn.net
www-strathberry-com.gccdn.net
images.fd2.toastoven.net
azteka.gslb.toastoven.net
*.app.meitudata.com
www.leroymerlin.ua
*.gslb.toastoven.net
www.tikamoon.de
www.tikamoon.co.uk
www.tikamoon.it
www.tikamoon.es
m.tikamoon.com
m.tikamoon.de
m.tikamoon.co.uk
static.tikamoon.com
*.necdn.nhnst.com
datas.ctb288.com
ae.awok.com
sa.awok.com
www.etxcapital.com
www.etxcapital.cn
www.innisfree.com
www.eukor.com
test.eukor.com
downloads.nessus.cdnetworks.net
*.orbitexch.com
*.hjclass.com
*.hujia.org
*.luyin.cctalk.com
*.portal.hujiang.com
orbitexch.com
*.s.hujiang.com
*.api.yeshj.com
*.track.yeshj.com
*.ocs.hjfile.cn
*.tiku.hujiang.com
*.quimg.com
*.oppomobile.com
*.cm.ksmobile.com
www.leroymerlin.ru
aem-prod.leroymerlin.ru
*.track.hujiang.com
*.cps.hujiang.com
*.c.hjfile.cn
*.a6.hujiang.com
*.notify.hjapi.com
*.inside.hujiang.com
*.soa.yeshj.com
hs.ur-results.com
static.leroymerlin.ua
*.music.126.net
*.163.com
www.apgroup.com
*.live.ksmobile.net
*.site.hujiang.com
*.s.hjfile.cn
preprod.bricomart.es
www.bricomart.es
*.coloros.com
*.exapi.oppo.com
*.nearme.com.cn
www.patekinfo.com
*.cdn.pengpengla.com
*.hjapi.com
*.ct.hjfile.cn
*.ct.s.hjfile.cn
*.cctalk.com
*.sec.hjclass.com
*.sec.yeshj.com
*.g.hjfile.cn
*.d.hjfile.cn
*.a6.hjfile.cn
*.b.hjfile.cn
*.theme.exapi.oppo.com
www.ryo.com
onedev.innisfree.com
*.adtiming.com
www.tikamoon.link
www.etudehouse.com
m.etudehouse.com
cdn-test.innisfree.com
*.comico.net
*.fancywe.com
vfp.leroymerlin.fr
tver.aem-prod.leroymerlin.ru
kostroma.aem-prod.leroymerlin.ru
*.semi.org
www.fpdchina.org
www.ledtaiwan.org
www.semichina.org
www.semiconchina.org
www.semiconeuropa.org
www.semiconkorea.org
www.semiconrussia.org
www.semiconsea.org
www.semicontaiwan.org
www.semiconwest.org
www.semiexpos.org
www.semiconjapan.org
crm.gulfsir.com
www.semi.org.cn

Other certificates including the domain name cdnetworks.net

(limited to 100 certificates)
support11a.cdnetworks.net
support10.cdnetworks.net
support11b.cdnetworks.net
support22.cdnetworks.net
support13.cdnetworks.net
support2.cdnetworks.net
support11b.cdnetworks.net
support.cdnetworks.net
ssl2.cdngc.net
ssl2.cdngc.net
support2.cdnetworks.net
support100.cdnetworks.net
krssl.cdngc.net
ssl2.cdngc.net
support14c.cdnetworks.net
krssl.cdngc.net
support11b.cdnetworks.net
ssl2.cdngc.net
krssl.cdngc.net
support11a.cdnetworks.net
support2.cdnetworks.net
support2.cdnetworks.net
support13.cdnetworks.net
support9.cdnetworks.net
support13.cdnetworks.net
ssl2.cdngc.net
support13.cdnetworks.net
*.lds.cdnetworks.net
support4.cdnetworks.net
support13.cdnetworks.net
support14c.cdnetworks.net
support15.cdnetworks.net
support9.cdnetworks.net
support5.cdnetworks.net
support13.cdnetworks.net
support5.cdnetworks.net
support9.cdnetworks.net
support12.cdnetworks.net
support3.cdnetworks.net
support.cdnetworks.net
support12.cdnetworks.net
support4.cdnetworks.net
support11b.cdnetworks.net
support3.cdnetworks.net
krssl.cdngc.net
support12.cdnetworks.net
krssl.cdngc.net
support99.cdnetworks.net
support9.cdnetworks.net
support10.cdnetworks.net
ssl2.cdngc.net
krssl.cdngc.net
support2.cdnetworks.net
krssl.cdngc.net
support11a.cdnetworks.net
krssl.cdngc.net
support5.cdnetworks.net
support14c.cdnetworks.net
ssl.cdngc.net
support10.cdnetworks.net
support14c.cdnetworks.net
support5.cdnetworks.net
support12.cdnetworks.net
support3.cdnetworks.net
support12.cdnetworks.net
support18.cdnetworks.net
support10.cdnetworks.net
support11a.cdnetworks.net
support11a.cdnetworks.net
support21.cdnetworks.net
support3.cdnetworks.net
support5.cdnetworks.net
support.cdnetworks.net
support10.cdnetworks.net
support10.cdnetworks.net
support12.cdnetworks.net
support14a.cdnetworks.net
support4.cdnetworks.net
ssl2.cdngc.net
support14a.cdnetworks.net
support12.cdnetworks.net
support3.cdnetworks.net
support5.cdnetworks.net
support9.cdnetworks.net
support100.cdnetworks.net
support2.cdnetworks.net
support11a.cdnetworks.net
support9.cdnetworks.net
support10.cdnetworks.net
support13.cdnetworks.net
support9.cdnetworks.net
ssl2.cdngc.net
support9.cdnetworks.net
support10.cdnetworks.net
ssl2.cdngc.net
support13.cdnetworks.net
support11b.cdnetworks.net
support14c.cdnetworks.net
support2.cdnetworks.net
krssl.cdngc.net

Certificate

The complete raw certificate details for support3.cdnetworks.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/Sc9xUqGwHdzGl8lDjA
NYjJ7ey/qrrt5clJz2ZHFXSQUNd38cwOv9wVZEur9tZaFlPF7yFGbJ0n8N3vNWod
ldtBN9FwQjusjvpxCRWly/IgEBRArNKivwFN5j9U1Sim9Z1WzZfUzp94X5KbAjxQ
GF5wMib+/0S/gVcyZ7tQsjr9rLgD8Vxu2lddhgb3HnvfgXKDQ0bs5hf0sfduI+CY
yAhr1yEUedWT6UiWn+rM4/Tkmh7b1ElPSru+bHQeq5uFR61zt3IZp4Z3KSl7GdHa
rC+gr/JobeJS0ZbPGJ5FWGKR9DXOewpzayg/YMBLi26xEwoZXjQ9DysrJ/j+UmZr
FQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13285694220348218930036181016307849423
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-11-10 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-01-12 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Campbell'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CDNetworks Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'support3.cdnetworks.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23222233046367800189340130650734392774245120315981703508243442925774838109823728819051110539690493937309104701371809218454612113680084935251540927196795437767361217025794838270419248038198011878073802973145097594418939061458400212329282469490653506975703897872766645435596604620700670132700374418712310008682059136051646943636614709696735270944243916392561754792930971963115359810069720048144026665226991970667406953063428081745627322336792826880519866245845445957748877139303990133311302709576080105635968389789018170759311118412534128979435966468241045485006493275594619145613345503775922098675267938801183399242517
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6af8e5b9cb07d9843a6742036eec1253c4ecb35e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (7117 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support3.cdnetworks.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i1.daumcdn.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's1.daumcdn.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.us.confirmit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.euro.confirmit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.riverisland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.riverisland.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eu.riverisland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'au.riverisland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content1.riverisland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content1-us.riverisland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content1.riverisland.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us.riverisland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shanghai-rishizhengxing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gdssl.image-gmkt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staticssl.image-gmkt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gdssl.image-qoo10.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staticssl.image-qoo10.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sso.pokemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pokemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qsm.qoo10.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'india.korean-culture.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pg.qoo10.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cache.theoutnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cache.net-a-porter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adserver.iminent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iminentapi.pantherssl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.commscope.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pg-cloud.qbox.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pg-static.qbox.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p-official.line-apps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.patek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ciapi.cityindex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'richmedia-cdn.localstars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.learndirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'learning.learndirect.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'access.learndirect.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm1.daumcdn.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fonts.ncwest.ncsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'script.image-gmkt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simg.gpotato.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.gpotato.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'script.image-qoo10.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.learndirect.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pgw.glbpay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homedepot.colorsmartbybehr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.qoo10.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mypi1.daumcdn.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sslpaygate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mypi2.daumcdn.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mypi3.daumcdn.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mypi4.daumcdn.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.homepackbuzz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'r.homepackbuzz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.scottdunn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.gomasterkey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.gomasterkey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reportbuilder.gomasterkey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cfg.cdngp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clients.etxcapital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trade.etxcapital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.monecor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static-ad.homepackbuzz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swupdate.bang-olufsen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eu.static.webzen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us.static.webzen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssp.scottdunn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dsifiles.dsisystemsinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.ctb988.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.ctb988.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.riverisland.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'encoding.image-gmkt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'res-hg.voomga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.lk777.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.quick-payment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dpssl.image-gmkt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dpssl.image-qoo10.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cnimage.wemakeprice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cnimage2.wemakeprice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ds.gscasino.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.confirmit.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'justin1.cdnetworks.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.riverisland.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content1.riverisland.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stockpair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stockpair.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'girdle-assets.net-a-porter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssl.instarekber.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.instarekber.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssl-h5.instarekber.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssl-static.instarekber.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.awok.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sulwhasoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nap-locale-info.nap-live.ext.net-a-porter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn-ph.zeemee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn-0.zeemee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn-vd.zeemee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zeemee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.riverisland.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content1.riverisland.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ryohair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cachebanner.williamhillcasino.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rtc-exp.co-exprise.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.ariston-net.remotethermo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ariston-net.remotethermo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ariston-net.remotethermo.com.gccdn.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.ariston-net.remotethermo.com.gccdn.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nap-assets.nap-live.ext.net-a-porter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flash.net-a-porter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.net-a-porter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.theoutnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.comprame.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'binary.etxcapital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cwe.learndirect.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.laneige.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stockpair.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stockpair.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dv.groupeadeo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.boutique.weldom.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ssltest.cdnga.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.co-exprise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.directworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waf.leroymerlin.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'showroom.amorepacifictravelretail.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.gomasterkey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'desa.doracdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qaexp1.directworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cachebanner.williamhill-casino.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjp.image-gmkt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stsg.image-gmkt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmy.image-gmkt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stid.image-gmkt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stcom.image-gmkt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sthk.image-gmkt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chinese.visitseoul.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tchinese.visitseoul.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'english.visitseoul.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'japanese.visitseoul.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'korean.visitseoul.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tid.cc.nhnst.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'img1.smdutyfree.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.geilicdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wd.geilicdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pokemontcg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'passthrough-sso-tcg.cdnga.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stockpair.capital'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn-test.iope.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iope.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fluid-adverts.localstars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'club.pokemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gd.image-gmkt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dp.image-gmkt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gdetail.image-gmkt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.image-gmkt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.toast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ducotedechezvous.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.ducotedechezvous.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's1.dcdcvcdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's2.dcdcvcdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'img.app.meitudata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cachebanner.williamhill-casino-club.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mamonde.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'md.proty.re'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'img.geilicdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vn.innisfree.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comicoth2-apis.krp.acc.toastoven.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-log-analytics.cloud.acc.toastoven.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'id.payco.acc.toastoven.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.supergaminator-download.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.bricoman.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat1.riuat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cachebanner.williamhillcasino.reviews'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'audio.geilicdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cachebanner.williamhillcasino.review'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nexteerqaexp.directworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.verite.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.osulloc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idacc.payco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.supplier.adeo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supplier.adeo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bricoman.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ripreprod.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content1.ripreprod.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content1-uat1.riuat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hk.innisfree.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sg.innisfree.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.innisfree.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'th.innisfree.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tw.innisfree.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'in.innisfree.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'id.innisfree.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.weldom.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nantes.bricoman.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'si.geilicdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amorepacific.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-broker.iot.leroymerlin.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-partners.iot.leroymerlin.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-enki-backend.iot.leroymerlin.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ppp.partners.iot.leroymerlin.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ur-browser.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'talentia.bricocenter.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'borgwarnerqaexp.directworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tikamoon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.statcounter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.statcounter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitseoul.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oaa.leroymerlin.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abridejardinmodulab.leroymerlin.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configurateur.leroymerlin.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cuisine3d.leroymerlin.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meublesdb.leroymerlin.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oaahome.leroymerlin.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portedeplacard.leroymerlin.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portedeplacard-sim.leroymerlin.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'proxymove.leroymerlin.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sdb3d.leroymerlin.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oaarangementsurmesure.leroymerlin.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fenetresurmesure.leroymerlin.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.leroymerlin.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicesv3.leroymerlin.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sso.leroymerlin.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mediaworld.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm1.dcdcvcdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm2.dcdcvcdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn-shopify-com.gccdn.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-strathberry-com.gccdn.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.fd2.toastoven.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'azteka.gslb.toastoven.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.app.meitudata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leroymerlin.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gslb.toastoven.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tikamoon.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tikamoon.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tikamoon.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tikamoon.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.tikamoon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.tikamoon.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.tikamoon.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.tikamoon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.necdn.nhnst.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'datas.ctb288.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ae.awok.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sa.awok.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.etxcapital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.etxcapital.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.innisfree.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eukor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.eukor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'downloads.nessus.cdnetworks.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.orbitexch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hjclass.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hujia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.luyin.cctalk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.portal.hujiang.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orbitexch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.s.hujiang.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.yeshj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.track.yeshj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ocs.hjfile.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tiku.hujiang.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.quimg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oppomobile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cm.ksmobile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leroymerlin.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aem-prod.leroymerlin.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.track.hujiang.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cps.hujiang.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.c.hjfile.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.a6.hujiang.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.notify.hjapi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.inside.hujiang.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.soa.yeshj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hs.ur-results.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.leroymerlin.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.music.126.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.163.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.apgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.live.ksmobile.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.site.hujiang.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.s.hjfile.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.bricomart.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bricomart.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.coloros.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.exapi.oppo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nearme.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.patekinfo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cdn.pengpengla.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hjapi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ct.hjfile.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ct.s.hjfile.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cctalk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sec.hjclass.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sec.yeshj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.g.hjfile.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.d.hjfile.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.a6.hjfile.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.b.hjfile.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.theme.exapi.oppo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ryo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onedev.innisfree.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adtiming.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tikamoon.link'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.etudehouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.etudehouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn-test.innisfree.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.comico.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fancywe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vfp.leroymerlin.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tver.aem-prod.leroymerlin.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kostroma.aem-prod.leroymerlin.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.semi.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fpdchina.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ledtaiwan.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.semichina.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.semiconchina.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.semiconeuropa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.semiconkorea.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.semiconrussia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.semiconsea.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.semicontaiwan.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.semiconwest.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.semiexpos.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.semiconjapan.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crm.gulfsir.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.semi.org.cn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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