cartoonito.co.uk

- TURNER BROADCASTING SYSTEM, INC. -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 19:6c:d7:41:09:30:8c:0f:18:d6:69:e8 was issued on by GlobalSign nv-sa.

With 76 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Apple recommends that certificates be issued with a maximum validity of 397 days. TLS server certificates issued on or after September 1, 2020 00:00 GMT/UTC should not have a validity period greater than 397 days (https://support.apple.com/en-us/HT211025)

TURNER BROADCASTING SYSTEM, INC.

Organization: TURNER BROADCASTING SYSTEM, INC.
State / Province: Georgia
Locality: Atlanta
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 19:6c:d7:41:09:30:8c:0f:18:d6:69:e8
Serial Number (int): 7868705742546371575522159080
Serial Number lenght: 93 bits, 12 octets

SubjectKeyId: a1:bd:eb:a8:85:9e:08:a4:11:5d:39:65:d6:e2:45:aa:57:fe:57:d9
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): dc:76:4c:18:13:19:99:d5:94:39:7a:f3:8f:be:2b:16:0e:cb:b4:ae
Fingerprint (sha256): 17:3b:fc:75:8d:5e:d4:a7:51:b5:c0:44:13:a9:d9:a2:1f:0d:41:6a:eb:55:50:69:0b:d0:e8:3c:8c:4e:44:55

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018

Check the revocation status for certificate cartoonito.co.uk

76

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cartoonito.co.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cartoonito.co.uk
lightning.adultswim.co.uk
lightning.adultswim.fr
lightning.bachelornation.com
lightning.bekindbyellen.com
lightning.boing.es
lightning.boingtv.fr
lightning.boingtv.it
lightning.canaltcm.com
lightning.canaltnt.es
lightning.cartoonito.co.uk
lightning.cartoonito.it
lightning.cartoonnetwork.bg
lightning.cartoonnetwork.cl
lightning.cartoonnetwork.co.uk
lightning.cartoonnetwork.com.ar
lightning.cartoonnetwork.com.au
lightning.cartoonnetwork.com.br
lightning.cartoonnetwork.com.co
lightning.cartoonnetwork.com.mx
lightning.cartoonnetwork.com.tr
lightning.cartoonnetwork.com.ve
lightning.cartoonnetwork.cz
lightning.cartoonnetwork.de
lightning.cartoonnetwork.dk
lightning.cartoonnetwork.es
lightning.cartoonnetwork.fr
lightning.cartoonnetwork.hu
lightning.cartoonnetwork.it
lightning.cartoonnetwork.jp
lightning.cartoonnetwork.nl
lightning.cartoonnetwork.no
lightning.cartoonnetwork.pl
lightning.cartoonnetwork.pt
lightning.cartoonnetwork.ro
lightning.cartoonnetwork.ru
lightning.cartoonnetwork.se
lightning.cartoonnetworkarabic.com
lightning.cartoonnetworkasia.com
lightning.cartoonnetworkclimatechampions.com
lightning.cartoonnetworkhq.com
lightning.cartoonnetworkindia.com
lightning.cartoonnetworkla.com
lightning.cartoonnetworkme.com
lightning.cartoonnetworkmena.com
lightning.cnfanart.com
lightning.concorsiboingtv.it
lightning.concorsicartoonito.it
lightning.dccomics.com
lightning.dcuniverseinfinite.com
lightning.ellenshop.com
lightning.ellentube.com
lightning.extratv.com
lightning.looneytunes.com
lightning.shop.looneytunes.com
lightning.mondotv.jp
lightning.pogo.tv
lightning.safestepskids.com
lightning.tabichan.jp
lightning.tcmuk.tv
lightning.thereal.com
lightning.tnt-tv.de
lightning.tnt-tv.dk
lightning.tnt-tv.no
lightning.tnt-tv.pl
lightning.tnt-tv.ro
lightning.tnt-tv.se
lightning.tnt.africa
lightning.toofab.com
lightning.toonamiafrica.com
lightning.truecrimedaily.com
lightning.digitalredeem.warnerbros.com
lightning.warnerbros.com
lightning.warnermediaprivacy.com
lightning.wb.com
lightning.wizardingworld.com

Other certificates including the domain name cartoonito.co.uk

(limited to 100 certificates)
cartoonito.co.uk
cartoonito.co.uk
cartoonito.co.uk
cartoonito.co.uk
cartoonito.co.uk
cartoonito.co.uk
cartoonito.co.uk
cartoonito.co.uk
cartoonito.co.uk
cartoonito.co.uk
cartoonito.co.uk
cartoonito.co.uk
cartoonito.co.uk
cartoonito.co.uk
cartoonito.co.uk
cartoonito.co.uk
cartoonito.co.uk
cartoonito.co.uk
cartoonito.co.uk
cartoonito.co.uk
cartoonito.co.uk
cartoonito.co.uk
cartoonito.co.uk
cartoonito.co.uk
cartoonito.co.uk
cartoonito.co.uk

Certificate

The complete raw certificate details for cartoonito.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXca3FTJJ/PzDpxOocsc
fcfS+T+TTsbbEVyWgmjOcL15X7YjzENSma/1AGpBwFhnyD0Y1mE/IksCPqkov8Vk
Jr3168anjNi4fss3pQAOxdTobk2VdbZXDYhIWORy2u9QkUGVRC9UKffts5beqqFH
bswG14JCRND79tdH4bdgij9ckwH1bbVB9sL7CUTT1ZSeLcMoTuSoQVvSKSmuoi7e
jfNsI90MYZCo2LBi2N5y7sYoF6Ys3Ui2z6Ne9vH6dQcQZ+f69EdZs3UiJdB/5R6O
j/pdfkNqrcwK60Cv7KE8Tc8T3ozktpiAY3DZPtRpg6Ie0OKjgHDvXLj/7u1HE02c
YQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7868705742546371575522159080
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-08-03 17:06:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-04 17:06:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Georgia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Atlanta'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TURNER BROADCASTING SYSTEM, INC.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cartoonito.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21897959586395239159015916899669255165082733110254148955692713624102371526856203352101835375138993183384586306820491625201605625639962857048479926509215522961886989781696826175834620568539650336316188211628561334374180924702850575163073658705134404531220760848479507599861461437778191036557976346181302096091649391126280350454569006677898165132165151167198920598735609224200245029418496320331941792192308016926354540308897139369585453207167929559803861831834721393243624039544240546900779548265016835662367506957208403503115922691311883024277239141012358741846038103420779440147204083374575374577692373996672648060001
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cartoonito.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lightning.adultswim.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lightning.adultswim.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lightning.bachelornation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lightning.bekindbyellen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lightning.boing.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lightning.boingtv.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lightning.boingtv.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lightning.canaltcm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lightning.canaltnt.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lightning.cartoonito.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lightning.cartoonito.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lightning.cartoonnetwork.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lightning.cartoonnetwork.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lightning.cartoonnetwork.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lightning.cartoonnetwork.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lightning.cartoonnetwork.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lightning.cartoonnetwork.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lightning.cartoonnetwork.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lightning.cartoonnetwork.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lightning.cartoonnetwork.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lightning.cartoonnetwork.com.ve'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lightning.cartoonnetwork.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lightning.cartoonnetwork.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lightning.cartoonnetwork.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lightning.cartoonnetwork.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lightning.cartoonnetwork.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lightning.cartoonnetwork.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lightning.cartoonnetwork.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lightning.cartoonnetwork.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lightning.cartoonnetwork.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lightning.cartoonnetwork.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lightning.cartoonnetwork.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lightning.cartoonnetwork.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lightning.cartoonnetwork.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lightning.cartoonnetwork.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lightning.cartoonnetwork.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lightning.cartoonnetworkarabic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lightning.cartoonnetworkasia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lightning.cartoonnetworkclimatechampions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lightning.cartoonnetworkhq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lightning.cartoonnetworkindia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lightning.cartoonnetworkla.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lightning.cartoonnetworkme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lightning.cartoonnetworkmena.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lightning.cnfanart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lightning.concorsiboingtv.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lightning.concorsicartoonito.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lightning.dccomics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lightning.dcuniverseinfinite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lightning.ellenshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lightning.ellentube.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lightning.extratv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lightning.looneytunes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lightning.shop.looneytunes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lightning.mondotv.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lightning.pogo.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lightning.safestepskids.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lightning.tabichan.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lightning.tcmuk.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lightning.thereal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lightning.tnt-tv.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lightning.tnt-tv.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lightning.tnt-tv.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lightning.tnt-tv.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lightning.tnt-tv.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lightning.tnt-tv.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lightning.tnt.africa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lightning.toofab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lightning.toonamiafrica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lightning.truecrimedaily.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lightning.digitalredeem.warnerbros.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lightning.warnerbros.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lightning.warnermediaprivacy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lightning.wb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lightning.wizardingworld.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a1bdeba8859e08a4115d3965d6e245aa57fe57d9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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