www.colonytv.com

- NBCUniversal Media, LLC -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 07:ee:ad:5f:29:70:9b:c7:54:32:5a:36:5e:93:f9:24 was issued on by DigiCert Inc.

With 90 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

NBCUniversal Media, LLC

Organization: NBCUniversal Media, LLC
State / Province: New Jersey
Locality: Englewood Cliffs
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 07:ee:ad:5f:29:70:9b:c7:54:32:5a:36:5e:93:f9:24
Serial Number (int): 10543879019187591418258234395539536164
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: db:e4:b7:d0:1c:ad:f1:32:3f:a3:90:02:e6:94:ec:38:61:2d:7d:c2
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): cc:66:68:71:2c:35:b9:cf:4d:c1:8f:7d:ba:5f:dc:4a:dd:58:22:19
Fingerprint (sha256): 09:23:73:0d:77:1a:d7:df:46:66:15:94:2a:ec:67:55:bc:44:8b:d2:aa:a5:1b:65:f1:52:ae:6c:9c:e0:5e:62

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate www.colonytv.com

90

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.colonytv.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.colonytv.com
colonytv.com
www.wackyholidaywallpaperz.com
dev.tvecms.usa.nbcuni.com
stage.temptationislandpickuplines.com
thesecretlifeofmypet.com
uat.tvecms.usa.nbcuni.com
qa.tvecms.usa.nbcuni.com
static.accessonline.com
stage.sproutonline.com
www.mazzkaufreichenbach.com
www.e-coin.com
mail.cyprusnationalbank.com
www.wackywallpaperz.com
www.purgatorysd.com
www.lomax-looneylaw.com
static-stage.accessonline.com
www.securloq.com
uat.tvecms.universalkids.nbcuni.com
stage.u1rbr0uz.net
www.quarkltd.com
www.aseheinrich.com
static-prod.accessonline.com
www.notimetodie-film.ch
www.camsecpro.com
apps.cnb.sh
prod.tvecms.universalkids.nbcuni.com
z2beeow.bxjyb2jvda.net
stage.tvecms.usa.nbcuni.com
www.1917-lefilm.ch
fsociety00.dat.sh
www.littlefilm.nl
www.paramusestates.com
dev.tvecms.universalkids.nbcuni.com
stage.tvecms.universalkids.nbcuni.com
www.crimsonclupeidae.com
www.chiralcorp.com
accessonline.com
www.notimetodie-lefilm.ch
www.ma-lefilm.be
lt.tvecms.usa.nbcuni.com
www.temptationislandpickuplines.com
www.happydeathday.com
www.allrisenow.com
www.thesecretlifeofmypet.com
www.lastchristmas-film.ch
www.erasethehate.org
www.cyprusnationalbank.com
www.accessonline.com
v1.colonytv.com
directory.theparmenides.com
www.howtotrainyourdragon.com
erasethehate.org
www.dolittle.com.ar
stage.universaltalentdevelopment.com
www.dolittle.hu
stage.erasethehate.org
sdk.brand-mps.nbcuni.com
www.ramsdalebookgroup.com
www.trollswereldtour.nl
www.ma-lefilm.ch
www.surf.nbcuni.com
safety.cyprusnationalbank.com
www.ma-film.at
www.refstevorq.net
www.dolittle-lefilm.ch
ela.nplcsystems.com
lt.tvecms.universalkids.nbcuni.com
www.universaldigitaluniverse.com
www.kraftwerks3d.com
proxy.cyprusnationalbank.com
stage.universalkids.com
www.z2beeow.bxjyb2jvda.net
www.theparmenides.com
ssl-secure-vpn.com
stage.surf.nbcuni.com
www.1917-film.ch
www.dolittle-film.ch
edit.nbcumv.com
www.mafilm.ch
www.mamimozi.hu
www.refss0fstvk.net
www.elanplcsystems.com
account.cyprusnationalbank.com
www.lastchristmas-lefilm.ch
www.nbcuniversal.com
www.ma-movie.be
stage.accessonline.com
www.u1rbr0uz.net
www.depurgesouthholdings.com

Other certificates including the domain name colonytv.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.colonytv.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4LnJumQP9pKreGynE8xr
je5cbegurSCXRKCxH+6rTjb4hwy5jXJBJeAd2lcSbo7/+qad4XXO9flW1NBx/o+I
dnhcC9nLbudk0YYY3aHy358YPjtlB3F3J/N7nrI+XCJAzdkMtWZy9KVJ9iZHTTWz
x5unvEgwW/dugb0QGY7cQcHkdROB0J9W4SldU3Yv9ZFTYAy5dL6xZ+/Qk8dL7tIc
uFL7HO922yipjr93KohK9OtPNAhdlVrBMBhdNxMopkq+8W+hrxhwinxPOf6mjrhr
EaaFQRvUC+3cYRp65KnBwM+alFbnEtU3Gt4YhkpCbuXhZkxJw5n/GDSuN9CR//Qh
mQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10543879019187591418258234395539536164
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-17 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-01 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New Jersey'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Englewood Cliffs'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NBCUniversal Media, LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.colonytv.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28368995789924805428217754735086986708119531804439289990624872733220234310187051829322978360410360973287820150159688648655637660023668745017262245124051004356838808344285036614640460328253674950937955185051980187829755657133383168965645149416627159420716786081347391386136982224635706036640195790066125061382337133486521772063588110636424037214472002090730196833955798706791062731523546533119966027195426912477895372141638678034906477871050388176525832279925974221649788716558051294018785751445042426590915391775945323749452181575833497563287879423596632494418650894045151329354943313127743722850720542281303198015897
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							dbe4b7d01cadf1323fa39002e694ec38612d7dc2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2202 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.colonytv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'colonytv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wackyholidaywallpaperz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.tvecms.usa.nbcuni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.temptationislandpickuplines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thesecretlifeofmypet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.tvecms.usa.nbcuni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.tvecms.usa.nbcuni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.accessonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.sproutonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mazzkaufreichenbach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.e-coin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.cyprusnationalbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wackywallpaperz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.purgatorysd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lomax-looneylaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static-stage.accessonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.securloq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.tvecms.universalkids.nbcuni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.u1rbr0uz.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.quarkltd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aseheinrich.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static-prod.accessonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.notimetodie-film.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.camsecpro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apps.cnb.sh'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.tvecms.universalkids.nbcuni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'z2beeow.bxjyb2jvda.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.tvecms.usa.nbcuni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.1917-lefilm.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fsociety00.dat.sh'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.littlefilm.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paramusestates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.tvecms.universalkids.nbcuni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.tvecms.universalkids.nbcuni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crimsonclupeidae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chiralcorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accessonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.notimetodie-lefilm.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ma-lefilm.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lt.tvecms.usa.nbcuni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.temptationislandpickuplines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.happydeathday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.allrisenow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thesecretlifeofmypet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lastchristmas-film.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.erasethehate.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cyprusnationalbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.accessonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v1.colonytv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'directory.theparmenides.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.howtotrainyourdragon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'erasethehate.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dolittle.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.universaltalentdevelopment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dolittle.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.erasethehate.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sdk.brand-mps.nbcuni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ramsdalebookgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trollswereldtour.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ma-lefilm.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.surf.nbcuni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'safety.cyprusnationalbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ma-film.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.refstevorq.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dolittle-lefilm.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ela.nplcsystems.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lt.tvecms.universalkids.nbcuni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.universaldigitaluniverse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kraftwerks3d.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'proxy.cyprusnationalbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.universalkids.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.z2beeow.bxjyb2jvda.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theparmenides.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssl-secure-vpn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.surf.nbcuni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.1917-film.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dolittle-film.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edit.nbcumv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mafilm.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mamimozi.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.refss0fstvk.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elanplcsystems.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'account.cyprusnationalbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lastchristmas-lefilm.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nbcuniversal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ma-movie.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.accessonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.u1rbr0uz.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.depurgesouthholdings.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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