www.colonytv.com

- NBCUniversal Media, LLC -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 0f:f8:18:3d:1e:ae:1d:b9:10:9a:42:61:24:08:9f:15 was issued on by DigiCert Inc.

With 88 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

NBCUniversal Media, LLC

Organization: NBCUniversal Media, LLC
State / Province: New Jersey
Locality: Englewood Cliffs
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:f8:18:3d:1e:ae:1d:b9:10:9a:42:61:24:08:9f:15
Serial Number (int): 21226601177933820105372732964188233493
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: d6:b0:56:81:6a:fb:6b:50:8d:d5:4a:ba:85:b1:4b:d3:5b:6c:76:d5
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): aa:a8:80:45:9a:b4:ff:3f:00:9b:32:73:aa:5b:bf:22:e8:d6:9e:96
Fingerprint (sha256): 06:55:96:1a:ae:2f:c0:7d:06:f0:5a:99:f6:88:6a:a5:bd:0f:a7:31:78:86:79:9a:43:93:03:b3:08:9d:9e:35

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate www.colonytv.com

88

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.colonytv.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.colonytv.com
colonytv.com
www.surf.nbcuni.com
www.elanplcsystems.com
www.refss0fstvk.net
z2beeow.bxjyb2jvda.net
www.refstevorq.net
www.theparmenides.com
www.dolittle.hu
www.trollswereldtour.nl
uat.tvecms.usa.nbcuni.com
static.accessonline.com
accessonline.com
stage.sproutonline.com
account.cyprusnationalbank.com
www.howtotrainyourdragon.com
www.1917-film.ch
www.dolittle-lefilm.ch
edit.nbcumv.com
proxy.cyprusnationalbank.com
v1.colonytv.com
stage.accessonline.com
sdk.brand-mps.nbcuni.com
lt.tvecms.universalkids.nbcuni.com
static-prod.accessonline.com
www.mamimozi.hu
www.paramusestates.com
www.littlefilm.nl
www.kraftwerks3d.com
www.allrisenow.com
www.ma-movie.be
stage.erasethehate.org
fsociety00.dat.sh
www.u1rbr0uz.net
www.accessonline.com
www.ma-film.at
directory.theparmenides.com
www.lastchristmas-film.ch
www.mazzkaufreichenbach.com
www.ma-lefilm.ch
www.quarkltd.com
www.universaldigitaluniverse.com
www.thesecretlifeofmypet.com
stage.universalkids.com
www.purgatorysd.com
www.crimsonclupeidae.com
stage.tvecms.universalkids.nbcuni.com
www.wackywallpaperz.com
stage.surf.nbcuni.com
www.dolittle-film.ch
dev.tvecms.universalkids.nbcuni.com
www.lomax-looneylaw.com
www.chiralcorp.com
www.notimetodie-film.ch
www.cyprusnationalbank.com
www.erasethehate.org
www.wackyholidaywallpaperz.com
www.notimetodie-lefilm.ch
stage.tvecms.usa.nbcuni.com
lt.tvecms.usa.nbcuni.com
static-stage.accessonline.com
prod.tvecms.universalkids.nbcuni.com
www.aseheinrich.com
www.e-coin.com
dev.tvecms.usa.nbcuni.com
stage.u1rbr0uz.net
www.dolittle.com.ar
www.lastchristmas-lefilm.ch
www.depurgesouthholdings.com
www.z2beeow.bxjyb2jvda.net
www.mafilm.ch
www.1917-lefilm.ch
thesecretlifeofmypet.com
www.happydeathday.com
stage.temptationislandpickuplines.com
www.temptationislandpickuplines.com
ssl-secure-vpn.com
www.nbcuniversal.com
qa.tvecms.usa.nbcuni.com
www.ramsdalebookgroup.com
ela.nplcsystems.com
www.camsecpro.com
stage.universaltalentdevelopment.com
www.ma-lefilm.be
www.securloq.com
erasethehate.org
uat.tvecms.universalkids.nbcuni.com
apps.cnb.sh

Other certificates including the domain name colonytv.com

(limited to 100 certificates)
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
login.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
login.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
login.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com

Certificate

The complete raw certificate details for www.colonytv.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhYCWSpI1hZ0M4xqZdCn
h3XGu8Y7Q7bkQZdvt3UjJugqjedv00AfzVG44tRyNiM7eTME+FG4BdxwWkr635OO
6V4EUGuz67DlbDFHVfseb3zyKgmfMepZ0YV5Yi/txKjLXE+0h4Gye1oxi8x8/DaH
nG1l1U24rIQrw/MymD3VzArfU1Va8gQIs0Hs2+O0Yv73t8SSDqYFU3U1ZuztJ/sm
0XIBhVNkWMEdIK+KhNUyf0YXJTs5tQVfsvpMdlsNLVmC/dhns2ktrDYx61qOMxf5
zinyBMYDB2HTXub1oowYpovL/0z0GNn9uryEnML/x7ByFDqUpqZp5ovz7+SkRSCH
0wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 21226601177933820105372732964188233493
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-15 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-01 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New Jersey'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Englewood Cliffs'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NBCUniversal Media, LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.colonytv.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23491177851420741139391226860935443388745502932623461926978592378072922625032456863310420290882834001785171463604500204462911513320213104553636773128784141217566480772965764125304980534758591518121049112935440695011413457383310383279444825914725330056451144110289113503257549627049234808465993417732246356368563241988146944874913495364953808025072651892896547419012150906244234776879812759099150865387898770175781583182160025111691912665650586781985735081177327304891185901527662516577564765554929650179968245842721860371365061920009681926269240179752298600646990133329676382156249258350139106870630614760820895156179
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d6b056816afb6b508dd54aba85b14bd35b6c76d5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2142 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.colonytv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'colonytv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.surf.nbcuni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elanplcsystems.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.refss0fstvk.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'z2beeow.bxjyb2jvda.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.refstevorq.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theparmenides.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dolittle.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trollswereldtour.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.tvecms.usa.nbcuni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.accessonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accessonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.sproutonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'account.cyprusnationalbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.howtotrainyourdragon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.1917-film.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dolittle-lefilm.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edit.nbcumv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'proxy.cyprusnationalbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v1.colonytv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.accessonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sdk.brand-mps.nbcuni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lt.tvecms.universalkids.nbcuni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static-prod.accessonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mamimozi.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paramusestates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.littlefilm.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kraftwerks3d.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.allrisenow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ma-movie.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.erasethehate.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fsociety00.dat.sh'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.u1rbr0uz.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.accessonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ma-film.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'directory.theparmenides.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lastchristmas-film.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mazzkaufreichenbach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ma-lefilm.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.quarkltd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.universaldigitaluniverse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thesecretlifeofmypet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.universalkids.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.purgatorysd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crimsonclupeidae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.tvecms.universalkids.nbcuni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wackywallpaperz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.surf.nbcuni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dolittle-film.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.tvecms.universalkids.nbcuni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lomax-looneylaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chiralcorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.notimetodie-film.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cyprusnationalbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.erasethehate.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wackyholidaywallpaperz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.notimetodie-lefilm.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.tvecms.usa.nbcuni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lt.tvecms.usa.nbcuni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static-stage.accessonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.tvecms.universalkids.nbcuni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aseheinrich.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.e-coin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.tvecms.usa.nbcuni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.u1rbr0uz.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dolittle.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lastchristmas-lefilm.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.depurgesouthholdings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.z2beeow.bxjyb2jvda.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mafilm.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.1917-lefilm.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thesecretlifeofmypet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.happydeathday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.temptationislandpickuplines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.temptationislandpickuplines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssl-secure-vpn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nbcuniversal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.tvecms.usa.nbcuni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ramsdalebookgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ela.nplcsystems.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.camsecpro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.universaltalentdevelopment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ma-lefilm.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.securloq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'erasethehate.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.tvecms.universalkids.nbcuni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apps.cnb.sh'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed1850000016dcfdf095d000004030046304402207236055c297e60adfa58f2b6b1ecfe8105acd78b4fc57d22b327b8189d304c92022002d633e50f3b8a5fc0904106262761f2079cb628364343e3c281d9a23ec1b0050076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016dcfdf09ac0000040300473045022100b266d13008b7eec566930bac465af19b91719c40b78629ed9ec34466dcbf28ba0220781ad70b5edd4cb7c442f2b46f0b52965b60ec61df881e6359e90bc665a2dbe3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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