support3.cdnetworks.net

- CDNetworks Inc. -

Issued by DigiCert SHA2 High Assurance Server CA

About this certificate

This digital certificate with serial number 0d:e8:57:8c:48:64:3c:66:a5:bf:a6:b9:81:18:18:08 was issued on by DigiCert Inc.

With 219 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

CDNetworks Inc.

Organization: CDNetworks Inc.
State / Province: California
Locality: San Jose
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0d:e8:57:8c:48:64:3c:66:a5:bf:a6:b9:81:18:18:08
Serial Number (int): 18486352500366354574501337054255257608
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 6a:f8:e5:b9:cb:07:d9:84:3a:67:42:03:6e:ec:12:53:c4:ec:b3:5e
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b

Fingerprint (sha1): 53:51:58:1b:20:6a:c2:87:f5:44:91:1a:d8:f8:62:05:25:73:8b:59
Fingerprint (sha256): 06:02:76:3b:0a:73:9c:da:32:7f:80:65:73:3e:21:96:7e:aa:0e:da:3a:18:02:0f:af:d2:c1:d1:91:dc:4b:c6

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g5.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g5.crl

Check the revocation status for certificate support3.cdnetworks.net

219

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for support3.cdnetworks.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

support3.cdnetworks.net
i1.daumcdn.net
s1.daumcdn.net
cdn.us.confirmit.com
cdn.euro.confirmit.com
cdn.v-identity.com
www.riverisland.com
www.riverisland.fr
eu.riverisland.com
au.riverisland.com
content1.riverisland.com
content1-us.riverisland.com
content1.riverisland.fr
us.riverisland.com
www.shanghai-rishizhengxing.com
gdssl.image-gmkt.com
staticssl.image-gmkt.com
www.pauls-boutique.jp
gdssl.image-qoo10.cn
staticssl.image-qoo10.cn
sso.pokemon.com
www.pokemon.com
content6.flixster.com
qsm.qoo10.cn
tessera.ad.daum.net
india.korean-culture.org
pg.qoo10.com
cache.theoutnet.com
cache.net-a-porter.com
medyanet.doracdn.com
adserver.iminent.com
iminentapi.pantherssl.com
www.commscope.com
pg-cloud.qbox.me
pg-static.qbox.me
p-official.line-apps.com
www.patek.com
cdn2-obs.line-apps.com
minibar.iminent.com
ciapi.cityindex.com
richmedia-cdn.localstars.com
www1.applyforanaccount.com
portal.learndirect.com
lms.learndirect.com
content.learndirect.com
mcd.learndirect.com
www.learndirect.com
learning.learndirect.co.uk
access.learndirect.co.uk
m1.daumcdn.net
fonts.ncwest.ncsoft.com
script.image-gmkt.com
simg.gpotato.com
cdn.social-hyundai.com
static.gpotato.com
script.image-qoo10.cn
www.learndirect.co.uk
cdn.intohigher.com
pgw.glbpay.com
homedepot.colorsmartbybehr.com
members.pinnaclesports.com
admin.qoo10.cn
mypi1.daumcdn.net
www.sslpaygate.com
mypi2.daumcdn.net
mypi3.daumcdn.net
mypi4.daumcdn.net
static.homepackbuzz.com
r.homepackbuzz.com
www.scottdunn.com
login.youshop.com
app.gomasterkey.com
cdn.gomasterkey.com
reportbuilder.gomasterkey.com
us.josephandstacey.com
www.pinnaclesports.com
www1.pinnaclesports.com
www2.pinnaclesports.com
cfg.cdngp.net
clients.etxcapital.com
trade.etxcapital.com
cdn.monecor.com
static-ad.homepackbuzz.com
swupdate.bang-olufsen.com
eu.static.webzen.com
us.static.webzen.com
ssp.scottdunn.com
dsifiles.dsisystemsinc.com
secure.ctb988.net
secure.ctb988.com
www.riverisland.de
encoding.image-gmkt.com
apply.finspreads.com
barclays.applyforanaccount.com
imagessl.etstur.com
extranet.corbis.com
res-hg.voomga.com
webmail.lk777.net
www.quick-payment.com
www.pinnaclesportsaffiliates.com
portal-cn.thinkforex.com
dpssl.image-gmkt.com
dpssl.image-qoo10.cn
cdn-public.sociabble.com
cnimage.wemakeprice.com
cnimage2.wemakeprice.com
ds.gscasino.com
cdn.confirmit.com.au
sp.bwrapp.com
justin1.cdnetworks.net
www.riverisland.se
content1.riverisland.se
www.stockpair.com
www.stockpair.net
uat-cdn.egcdn.com
cdn.egcdn.com
gimg.wizwid.com
girdle-assets.net-a-porter.com
ssl.youshop.com
pay.youshop.com
ssl-static.youshop.com
ssl-h5.youshop.com
instarekber.com
ssl.instarekber.com
login.instarekber.com
ssl-h5.instarekber.com
ssl-static.instarekber.com
image1.icbnet.co.kr
mobil.tozlu.com
www.jdb365.com
www.awok.com
www.sulwhasoo.com
nap-locale-info.nap-live.ext.net-a-porter.com
userimages.zaptack.com
www.zaptack.com
uservideos.zaptack.com
secure.corbisimages.com
w0.cdnwm.com
w1.cdnwm.com
w2.cdnwm.com
w3.cdnwm.com
l0.cdnwm.com
l1.cdnwm.com
l2.cdnwm.com
l3.cdnwm.com
cdn-ph.zeemee.com
cdn-0.zeemee.com
cdn-vd.zeemee.com
www.zeemee.com
www.riverisland.nl
content1.riverisland.nl
www.ryohair.com
cachebanner.williamhillcasino.com
rtc-exp.co-exprise.net
test.ariston-net.remotethermo.com
www.ariston-net.remotethermo.com
www.ariston-net.remotethermo.com.gccdn.net
test.ariston-net.remotethermo.com.gccdn.net
www.lebangtuan.cn
nap-assets.nap-live.ext.net-a-porter.com
flash.net-a-porter.com
video.net-a-porter.com
video.theoutnet.com
www.comprame.com
binary.etxcapital.com
cwe.learndirect.co.uk
www.laneige.com
www.stockpair.biz
www.stockpair.ru
dv.groupeadeo.com
www.boutique.weldom.fr
*.lgworld.com
*.ssltest.cdnga.net
*.co-exprise.com
*.directworks.com
waf.leroymerlin.fr
showroom.amorepacifictravelretail.cn
content.gomasterkey.com
applyforanaccount.ifxmarkets.com
desa.doracdn.com
qaexp1.directworks.com
cachebanner.williamhill-casino.com
stjp.image-gmkt.com
stsg.image-gmkt.com
stmy.image-gmkt.com
stid.image-gmkt.com
stcom.image-gmkt.com
sthk.image-gmkt.com
chinese.visitseoul.net
tchinese.visitseoul.net
english.visitseoul.net
japanese.visitseoul.net
korean.visitseoul.net
tid.cc.nhnst.com
ciapi-whs.cityindex.com
img1.smdutyfree.com
assets.geilicdn.com
wd.geilicdn.com
im.weidian.com
www.pokemontcg.com
passthrough-sso-tcg.cdnga.net
www.stockpair.capital
cdn-test.iope.com
www.iope.com
fluid-adverts.localstars.com
cachebanner.williamhillcasino-club.com
club.pokemon.com
gd.image-gmkt.com
dp.image-gmkt.com
gdetail.image-gmkt.com
static.image-gmkt.com
images.toast.com
img.app.meitudata.com
cachebanner.williamhill-casino-club.com
www.mamonde.com
portal-cn.thinkmarkets.com
www.thinkmarkets.com.cn
md.proty.re
img.geilicdn.com

Other certificates including the domain name cdnetworks.net

(limited to 100 certificates)
support11a.cdnetworks.net
support10.cdnetworks.net
support11b.cdnetworks.net
support22.cdnetworks.net
support13.cdnetworks.net
support2.cdnetworks.net
support11b.cdnetworks.net
support.cdnetworks.net
ssl2.cdngc.net
ssl2.cdngc.net
support2.cdnetworks.net
support100.cdnetworks.net
krssl.cdngc.net
ssl2.cdngc.net
support14c.cdnetworks.net
krssl.cdngc.net
support11b.cdnetworks.net
ssl2.cdngc.net
krssl.cdngc.net
support11a.cdnetworks.net
support2.cdnetworks.net
support2.cdnetworks.net
support13.cdnetworks.net
support9.cdnetworks.net
support13.cdnetworks.net
ssl2.cdngc.net
support13.cdnetworks.net
*.lds.cdnetworks.net
support4.cdnetworks.net
support13.cdnetworks.net
support14c.cdnetworks.net
support15.cdnetworks.net
support9.cdnetworks.net
support5.cdnetworks.net
support13.cdnetworks.net
support5.cdnetworks.net
support9.cdnetworks.net
support12.cdnetworks.net
support3.cdnetworks.net
support.cdnetworks.net
support12.cdnetworks.net
support4.cdnetworks.net
support11b.cdnetworks.net
support3.cdnetworks.net
krssl.cdngc.net
support12.cdnetworks.net
krssl.cdngc.net
support99.cdnetworks.net
support9.cdnetworks.net
support10.cdnetworks.net
ssl2.cdngc.net
krssl.cdngc.net
support2.cdnetworks.net
krssl.cdngc.net
support11a.cdnetworks.net
krssl.cdngc.net
support5.cdnetworks.net
support14c.cdnetworks.net
ssl.cdngc.net
support10.cdnetworks.net
support14c.cdnetworks.net
support5.cdnetworks.net
support12.cdnetworks.net
support3.cdnetworks.net
support12.cdnetworks.net
support18.cdnetworks.net
support10.cdnetworks.net
support11a.cdnetworks.net
support11a.cdnetworks.net
support21.cdnetworks.net
support3.cdnetworks.net
support5.cdnetworks.net
support.cdnetworks.net
support10.cdnetworks.net
support10.cdnetworks.net
support12.cdnetworks.net
support14a.cdnetworks.net
support4.cdnetworks.net
ssl2.cdngc.net
support14a.cdnetworks.net
support12.cdnetworks.net
support3.cdnetworks.net
support5.cdnetworks.net
support9.cdnetworks.net
support100.cdnetworks.net
support2.cdnetworks.net
support11a.cdnetworks.net
support9.cdnetworks.net
support10.cdnetworks.net
support13.cdnetworks.net
support9.cdnetworks.net
ssl2.cdngc.net
support9.cdnetworks.net
support10.cdnetworks.net
ssl2.cdngc.net
support13.cdnetworks.net
support11b.cdnetworks.net
support14c.cdnetworks.net
support2.cdnetworks.net
krssl.cdngc.net

Certificate

The complete raw certificate details for support3.cdnetworks.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/Sc9xUqGwHdzGl8lDjA
NYjJ7ey/qrrt5clJz2ZHFXSQUNd38cwOv9wVZEur9tZaFlPF7yFGbJ0n8N3vNWod
ldtBN9FwQjusjvpxCRWly/IgEBRArNKivwFN5j9U1Sim9Z1WzZfUzp94X5KbAjxQ
GF5wMib+/0S/gVcyZ7tQsjr9rLgD8Vxu2lddhgb3HnvfgXKDQ0bs5hf0sfduI+CY
yAhr1yEUedWT6UiWn+rM4/Tkmh7b1ElPSru+bHQeq5uFR61zt3IZp4Z3KSl7GdHa
rC+gr/JobeJS0ZbPGJ5FWGKR9DXOewpzayg/YMBLi26xEwoZXjQ9DysrJ/j+UmZr
FQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18486352500366354574501337054255257608
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-12-04 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-01-12 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Jose'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CDNetworks Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'support3.cdnetworks.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23222233046367800189340130650734392774245120315981703508243442925774838109823728819051110539690493937309104701371809218454612113680084935251540927196795437767361217025794838270419248038198011878073802973145097594418939061458400212329282469490653506975703897872766645435596604620700670132700374418712310008682059136051646943636614709696735270944243916392561754792930971963115359810069720048144026665226991970667406953063428081745627322336792826880519866245845445957748877139303990133311302709576080105635968389789018170759311118412534128979435966468241045485006493275594619145613345503775922098675267938801183399242517
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6af8e5b9cb07d9843a6742036eec1253c4ecb35e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4884 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support3.cdnetworks.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i1.daumcdn.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's1.daumcdn.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.us.confirmit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.euro.confirmit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.v-identity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.riverisland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.riverisland.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eu.riverisland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'au.riverisland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content1.riverisland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content1-us.riverisland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content1.riverisland.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us.riverisland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shanghai-rishizhengxing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gdssl.image-gmkt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staticssl.image-gmkt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pauls-boutique.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gdssl.image-qoo10.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staticssl.image-qoo10.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sso.pokemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pokemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content6.flixster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qsm.qoo10.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tessera.ad.daum.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'india.korean-culture.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pg.qoo10.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cache.theoutnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cache.net-a-porter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medyanet.doracdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adserver.iminent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iminentapi.pantherssl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.commscope.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pg-cloud.qbox.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pg-static.qbox.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p-official.line-apps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.patek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn2-obs.line-apps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'minibar.iminent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ciapi.cityindex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'richmedia-cdn.localstars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www1.applyforanaccount.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.learndirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lms.learndirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.learndirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcd.learndirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.learndirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'learning.learndirect.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'access.learndirect.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm1.daumcdn.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fonts.ncwest.ncsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'script.image-gmkt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simg.gpotato.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.social-hyundai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.gpotato.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'script.image-qoo10.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.learndirect.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.intohigher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pgw.glbpay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homedepot.colorsmartbybehr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'members.pinnaclesports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.qoo10.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mypi1.daumcdn.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sslpaygate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mypi2.daumcdn.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mypi3.daumcdn.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mypi4.daumcdn.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.homepackbuzz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'r.homepackbuzz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.scottdunn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.youshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.gomasterkey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.gomasterkey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reportbuilder.gomasterkey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us.josephandstacey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pinnaclesports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www1.pinnaclesports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.pinnaclesports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cfg.cdngp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clients.etxcapital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trade.etxcapital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.monecor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static-ad.homepackbuzz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swupdate.bang-olufsen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eu.static.webzen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us.static.webzen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssp.scottdunn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dsifiles.dsisystemsinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.ctb988.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.ctb988.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.riverisland.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'encoding.image-gmkt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apply.finspreads.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barclays.applyforanaccount.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imagessl.etstur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'extranet.corbis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'res-hg.voomga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.lk777.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.quick-payment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pinnaclesportsaffiliates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal-cn.thinkforex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dpssl.image-gmkt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dpssl.image-qoo10.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn-public.sociabble.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cnimage.wemakeprice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cnimage2.wemakeprice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ds.gscasino.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.confirmit.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.bwrapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'justin1.cdnetworks.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.riverisland.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content1.riverisland.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stockpair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stockpair.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-cdn.egcdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.egcdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gimg.wizwid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'girdle-assets.net-a-porter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssl.youshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pay.youshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssl-static.youshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssl-h5.youshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'instarekber.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssl.instarekber.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.instarekber.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssl-h5.instarekber.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssl-static.instarekber.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image1.icbnet.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobil.tozlu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jdb365.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.awok.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sulwhasoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nap-locale-info.nap-live.ext.net-a-porter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'userimages.zaptack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zaptack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uservideos.zaptack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.corbisimages.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'w0.cdnwm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'w1.cdnwm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'w2.cdnwm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'w3.cdnwm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'l0.cdnwm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'l1.cdnwm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'l2.cdnwm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'l3.cdnwm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn-ph.zeemee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn-0.zeemee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn-vd.zeemee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zeemee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.riverisland.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content1.riverisland.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ryohair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cachebanner.williamhillcasino.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rtc-exp.co-exprise.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.ariston-net.remotethermo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ariston-net.remotethermo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ariston-net.remotethermo.com.gccdn.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.ariston-net.remotethermo.com.gccdn.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lebangtuan.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nap-assets.nap-live.ext.net-a-porter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flash.net-a-porter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.net-a-porter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.theoutnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.comprame.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'binary.etxcapital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cwe.learndirect.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.laneige.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stockpair.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stockpair.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dv.groupeadeo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.boutique.weldom.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lgworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ssltest.cdnga.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.co-exprise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.directworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waf.leroymerlin.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'showroom.amorepacifictravelretail.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.gomasterkey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'applyforanaccount.ifxmarkets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'desa.doracdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qaexp1.directworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cachebanner.williamhill-casino.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjp.image-gmkt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stsg.image-gmkt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmy.image-gmkt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stid.image-gmkt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stcom.image-gmkt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sthk.image-gmkt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chinese.visitseoul.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tchinese.visitseoul.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'english.visitseoul.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'japanese.visitseoul.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'korean.visitseoul.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tid.cc.nhnst.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ciapi-whs.cityindex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'img1.smdutyfree.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.geilicdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wd.geilicdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'im.weidian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pokemontcg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'passthrough-sso-tcg.cdnga.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stockpair.capital'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn-test.iope.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iope.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fluid-adverts.localstars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cachebanner.williamhillcasino-club.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'club.pokemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gd.image-gmkt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dp.image-gmkt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gdetail.image-gmkt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.image-gmkt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.toast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'img.app.meitudata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cachebanner.williamhill-casino-club.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mamonde.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal-cn.thinkmarkets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thinkmarkets.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'md.proty.re'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'img.geilicdn.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g5.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g5.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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