cdn05.cdnsvc.com

Issued by COMODO RSA Domain Validation Secure Server CA

About this certificate

This digital certificate with serial number a8:74:15:eb:f8:93:d5:fd:71:46:21:d9:c6:17:80:34 was issued on by COMODO CA Limited.

With 42 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cdn05.cdnsvc.com,OU=Domain Control Validated+OU=COMODO SSL Unified Communications

COMODO CA Limited

Organization: COMODO CA Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): a8:74:15:eb:f8:93:d5:fd:71:46:21:d9:c6:17:80:34
Serial Number (int): 223913054353606779260373639085637992500
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: cc:7e:5e:29:5e:01:af:b0:48:cf:c4:46:1e:e4:dd:c0:f6:06:33:79
AuthorityKeyId: 90:af:6a:3a:94:5a:0b:d8:90:ea:12:56:73:df:43:b4:3a:28:da:e7

Fingerprint (sha1): 29:36:ab:ae:ce:25:45:6f:0a:5e:4f:08:6d:17:9a:9d:83:5a:a0:12
Fingerprint (sha256): 2d:d3:e1:b7:30:e3:0a:af:78:cc:61:9f:d0:ea:8f:b8:7b:04:a8:1d:1b:b6:ac:90:3d:7b:34:59:88:9e:40:3e

Issuing Certificate URL: http://crt.comodoca.com/COMODORSADomainValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.comodoca.com
CRL Distribution Point: http://crl.comodoca.com/COMODORSADomainValidationSecureServerCA.crl

Check the revocation status for certificate cdn05.cdnsvc.com

42

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cdn05.cdnsvc.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cdn05.cdnsvc.com
1923v073.cdnsvc.com
8193o032.cdnsvc.com
APINCENTIVES.DEALERCONNECTION.COM
a.rewardstyle.com
affiliates.optionrallycn.com
affiliates.vsoption.com
api-spotplatform.cwgoption.com
api-spotplatform.jsoption.com
britachina.scene7.com
burberry.scene7.com
china.minerva.kgi.edu
cn-prep.ninaricci.com
cn.ninaricci.com
content.optionrallycn.com
i.rewardstyle.com
lp31.hm.com
lp32.hm.com
m.optionrallycn.com
minerva.kgi.edu
payments.optionrallycn.com
payments.vsoption.com
pumachina.scene7.com
reportcard.englishcentralchina.com
spotplatform.cwgoption.com
spotplatform.jsoption.com
static1.coca-coladesignmachine.com.cn
trading.vsoption.com
w.rewardstyle.com
widgets.optionrallycn.com
widgets.vsoption.com
www.coca-coladesignmachine.com.cn
www.cwgoption.com
www.dyson.cn
www.janrain.com
www.jsoption.com
www.minerva.kgi.edu
www.optionrallycn.com
www.vsoption.com
www.xmos.com
www31.hm.com
www32.hm.com

Other certificates including the domain name cdnsvc.com

(limited to 100 certificates)
cdn08.cdnsvc.com
cdn14.cdnsvc.com
suite.partner.microsoftonline.cn
cdn08.cdnsvc.com
cdn05.cdnsvc.com
cdn08.cdnsvc.com
cdn05.cdnsvc.com
cdn08.cdnsvc.com
cdn07.cdnsvc.com
cdn10.cdnsvc.com
cdn07.cdnsvc.com
cdn07.cdnsvc.com
cdn10.cdnsvc.com
cdn06.cdnsvc.com
cdn10.cdnsvc.com
cdn06.cdnsvc.com
cdn08.cdnsvc.com
cdn03.ccedge.net
cdn10.cdnsvc.com
cdn10.cdnsvc.com
suite.partner.microsoftonline.cn
cdn03.ccedge.net
cdn08.cdnsvc.com
webshell.suite.partner.microsoftonline.cn
cdn07.cdnsvc.com
en-chinacache-com-hubspot-origin.cdnsvc.com
*.cdnsvc.com
cdn08.cdnsvc.com
webshell.suite.partner.microsoftonline.cn
cdn10.cdnsvc.com
cdn07.cdnsvc.com
cdn05.cdnsvc.com
cdn03.c3edge.net
cdn16.cdnsvc.com
cdn06.cdnsvc.com
cdn99.cdnsvc.com
cdn08.cdnsvc.com
cdn16.cdnsvc.com
cdn08.cdnsvc.com
cdn08.cdnsvc.com
cdn08.cdnsvc.com
cdn99.cdnsvc.com
cdn08.cdnsvc.com
cdn16.cdnsvc.com
cdn16.cdnsvc.com
cdn01.ccedge.net
cdn10.cdnsvc.com
cdn05.cdnsvc.com
cdn05.cdnsvc.com
cdn05.cdnsvc.com
*.cdnsvc.com
cdn16.cdnsvc.com
cdn08.cdnsvc.com
cdn16.cdnsvc.com
cdn05.cdnsvc.com
cdn16.cdnsvc.com
cdn07.cdnsvc.com
cdn16.cdnsvc.com
cdn08.cdnsvc.com
cdn08.cdnsvc.com
cdn16.cdnsvc.com
cdn08.cdnsvc.com
cdn10.cdnsvc.com
cdn05.cdnsvc.com
cdn06.cdnsvc.com
cdn07.cdnsvc.com
cdn10.cdnsvc.com
cdn08.cdnsvc.com
ebu01.cdnsvc.com
cdn15.cdnsvc.com
cdn08.cdnsvc.com
cdn03.ccedge.net
cdn16.cdnsvc.com
cdn07.cdnsvc.com
cdn10.cdnsvc.com
en-chinacache-com-hubspot-origin.cdnsvc.com
cdn08.cdnsvc.com
cdn06.cdnsvc.com
cdn16.cdnsvc.com
cdn99.cdnsvc.com
cdn08.cdnsvc.com
cdn06.cdnsvc.com
suite.partner.microsoftonline.cn
cdn16.cdnsvc.com
cdn08.cdnsvc.com
cdn10.cdnsvc.com
cdn14.cdnsvc.com
cdn99.cdnsvc.com
cdn07.cdnsvc.com
cdn03.c3edge.net
suite.partner.microsoftonline.cn
cdn08.cdnsvc.com
cdn05.cdnsvc.com
cdn03.c3edge.net
cdn07.cdnsvc.com
cdn07.cdnsvc.com
cdn05.cdnsvc.com
ebu01.cdnsvc.com
cdn16.cdnsvc.com
cdn01.ccedge.net

Certificate

The complete raw certificate details for cdn05.cdnsvc.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIII/zCCB+egAwIBAgIRAKh0Fev4k9X9cUYh2cYXgDQwDQYJKoZIhvcNAQELBQAw
gZAxCzAJBgNVBAYTAkdCMRswGQYDVQQIExJHcmVhdGVyIE1hbmNoZXN0ZXIxEDAO
BgNVBAcTB1NhbGZvcmQxGjAYBgNVBAoTEUNPTU9ETyBDQSBMaW1pdGVkMTYwNAYD
VQQDEy1DT01PRE8gUlNBIERvbWFpbiBWYWxpZGF0aW9uIFNlY3VyZSBTZXJ2ZXIg
Q0EwHhcNMTQxMTE5MDAwMDAwWhcNMTUxMTE5MjM1OTU5WjBqMSEwHwYDVQQLExhE
b21haW4gQ29udHJvbCBWYWxpZGF0ZWQxKjAoBgNVBAsTIUNPTU9ETyBTU0wgVW5p
ZmllZCBDb21tdW5pY2F0aW9uczEZMBcGA1UEAxMQY2RuMDUuY2Ruc3ZjLmNvbTCC
ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALxQiWPxZCj/2XCvhLsZCQ+y
4GOU1LJKs8QR1bZcUj1PuXzQNwqf5Fp8AZpRVx4q+LrwEQ888lcfvLXj8sjHcOxe
0rYZrC7aR/fW8jzPlJVtn8Hf0vLJ6J0uq4n2M9IifPZ9DEDtowk6jbs8IxPRIL8N
fd0c72neP1G+4bsli50czpNE3IQRuCNPrLLAyJcqyOzJoucQLXpm9Q7AU2h05kyu
iXW09s3Ax3klO84Yb9QCNSNsLT5vvjKbEEoZYjLRH8zZftsJ21aV+jAhwWPfh3Tl
yrTsHb0lbRzB1YPx19wpJWV4p8diSwlVZQ8gV+Y8z6TorEx3eEUcIOeEvuXcd8EC
AwEAAaOCBXcwggVzMB8GA1UdIwQYMBaAFJCvajqUWgvYkOoSVnPfQ7Q6KNrnMB0G
A1UdDgQWBBTMfl4pXgGvsEjPxEYe5N3A9gYzeTAOBgNVHQ8BAf8EBAMCBaAwDAYD
VR0TAQH/BAIwADAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwTwYDVR0g
BEgwRjA6BgsrBgEEAbIxAQICBzArMCkGCCsGAQUFBwIBFh1odHRwczovL3NlY3Vy
ZS5jb21vZG8uY29tL0NQUzAIBgZngQwBAgEwVAYDVR0fBE0wSzBJoEegRYZDaHR0
cDovL2NybC5jb21vZG9jYS5jb20vQ09NT0RPUlNBRG9tYWluVmFsaWRhdGlvblNl
Y3VyZVNlcnZlckNBLmNybDCBhQYIKwYBBQUHAQEEeTB3ME8GCCsGAQUFBzAChkNo
dHRwOi8vY3J0LmNvbW9kb2NhLmNvbS9DT01PRE9SU0FEb21haW5WYWxpZGF0aW9u
U2VjdXJlU2VydmVyQ0EuY3J0MCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5jb21v
ZG9jYS5jb20wggPDBgNVHREEggO6MIIDtoIQY2RuMDUuY2Ruc3ZjLmNvbYITMTky
M3YwNzMuY2Ruc3ZjLmNvbYITODE5M28wMzIuY2Ruc3ZjLmNvbYIhQVBJTkNFTlRJ
VkVTLkRFQUxFUkNPTk5FQ1RJT04uQ09NghFhLnJld2FyZHN0eWxlLmNvbYIcYWZm
aWxpYXRlcy5vcHRpb25yYWxseWNuLmNvbYIXYWZmaWxpYXRlcy52c29wdGlvbi5j
b22CHmFwaS1zcG90cGxhdGZvcm0uY3dnb3B0aW9uLmNvbYIdYXBpLXNwb3RwbGF0
Zm9ybS5qc29wdGlvbi5jb22CFWJyaXRhY2hpbmEuc2NlbmU3LmNvbYITYnVyYmVy
cnkuc2NlbmU3LmNvbYIVY2hpbmEubWluZXJ2YS5rZ2kuZWR1ghVjbi1wcmVwLm5p
bmFyaWNjaS5jb22CEGNuLm5pbmFyaWNjaS5jb22CGWNvbnRlbnQub3B0aW9ucmFs
bHljbi5jb22CEWkucmV3YXJkc3R5bGUuY29tggtscDMxLmhtLmNvbYILbHAzMi5o
bS5jb22CE20ub3B0aW9ucmFsbHljbi5jb22CD21pbmVydmEua2dpLmVkdYIacGF5
bWVudHMub3B0aW9ucmFsbHljbi5jb22CFXBheW1lbnRzLnZzb3B0aW9uLmNvbYIU
cHVtYWNoaW5hLnNjZW5lNy5jb22CInJlcG9ydGNhcmQuZW5nbGlzaGNlbnRyYWxj
aGluYS5jb22CGnNwb3RwbGF0Zm9ybS5jd2dvcHRpb24uY29tghlzcG90cGxhdGZv
cm0uanNvcHRpb24uY29tgiVzdGF0aWMxLmNvY2EtY29sYWRlc2lnbm1hY2hpbmUu
Y29tLmNughR0cmFkaW5nLnZzb3B0aW9uLmNvbYIRdy5yZXdhcmRzdHlsZS5jb22C
GXdpZGdldHMub3B0aW9ucmFsbHljbi5jb22CFHdpZGdldHMudnNvcHRpb24uY29t
giF3d3cuY29jYS1jb2xhZGVzaWdubWFjaGluZS5jb20uY26CEXd3dy5jd2dvcHRp
b24uY29tggx3d3cuZHlzb24uY26CD3d3dy5qYW5yYWluLmNvbYIQd3d3Lmpzb3B0
aW9uLmNvbYITd3d3Lm1pbmVydmEua2dpLmVkdYIVd3d3Lm9wdGlvbnJhbGx5Y24u
Y29tghB3d3cudnNvcHRpb24uY29tggx3d3cueG1vcy5jb22CDHd3dzMxLmhtLmNv
bYIMd3d3MzIuaG0uY29tMA0GCSqGSIb3DQEBCwUAA4IBAQBX9wMyADv0uiBmjmAV
3IfSHU/WfpkchqB3uge24evdua/r5k2ZcWLQX987XSV4u2+kbYrUhI8R4Rodp6by
NkpmG3GRuWWQC8769EY2QOgA6zvGQNna6suEVcXugkiSXPj4Iszo2pmXAnUbKURp
sFf2U4kCwfHpCUVi72cvceIp4UeDuxH8LwpMgUL7PWzt0KmwguV7Rb7DiInISKq2
4u8we1yRar61Kfs6qv8FfCqXPxIs+Q8Ucy4ZlBIo3ouUHwEKgBux5QGyElVcH9gr
k4gN4INFoP7nxbtALsEr/F0fstpA2Q3YYj5Be24s/I3WmWIlL+ywIl6sz/kK64YO
C7c+
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFCJY/FkKP/ZcK+EuxkJ
D7LgY5TUskqzxBHVtlxSPU+5fNA3Cp/kWnwBmlFXHir4uvARDzzyVx+8tePyyMdw
7F7SthmsLtpH99byPM+UlW2fwd/S8snonS6rifYz0iJ89n0MQO2jCTqNuzwjE9Eg
vw193Rzvad4/Ub7huyWLnRzOk0TchBG4I0+sssDIlyrI7Mmi5xAtemb1DsBTaHTm
TK6JdbT2zcDHeSU7zhhv1AI1I2wtPm++MpsQShliMtEfzNl+2wnbVpX6MCHBY9+H
dOXKtOwdvSVtHMHVg/HX3CklZXinx2JLCVVlDyBX5jzPpOisTHd4RRwg54S+5dx3
wQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 223913054353606779260373639085637992500
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO CA Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO RSA Domain Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-11-19 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-11-19 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO SSL Unified Communications'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cdn05.cdnsvc.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23772515451312854863550299190384864615874830634943179940860143811657763687624715421381660833139079665444494827163832294877363580137622386154083309514052836454374379584263570924172202715577925273087154491902604740057583063091805521117204569975057973757143800550574430323274331355539548978738836507651639736332554837124912702345982222267475717010313237136465735747544522438668476305267321768431219705986022821335716451562863519699962316592962761771704988929990676616578216671100902208336165263869096430056985273433669076318684929064662348457885866430834071859695522009778407608880486605731698383809415642397068020709313
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 90af6a3a945a0bd890ea125673df43b43a28dae7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cc7e5e295e01afb048cfc4461ee4ddc0f6063379
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://secure.comodo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (77 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.comodoca.com/COMODORSADomainValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (121 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.comodoca.com/COMODORSADomainValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.comodoca.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (954 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn05.cdnsvc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1923v073.cdnsvc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '8193o032.cdnsvc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'APINCENTIVES.DEALERCONNECTION.COM'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a.rewardstyle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'affiliates.optionrallycn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'affiliates.vsoption.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-spotplatform.cwgoption.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-spotplatform.jsoption.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'britachina.scene7.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'burberry.scene7.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'china.minerva.kgi.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cn-prep.ninaricci.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cn.ninaricci.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.optionrallycn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.rewardstyle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lp31.hm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lp32.hm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.optionrallycn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'minerva.kgi.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payments.optionrallycn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payments.vsoption.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pumachina.scene7.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reportcard.englishcentralchina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spotplatform.cwgoption.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spotplatform.jsoption.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static1.coca-coladesignmachine.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trading.vsoption.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'w.rewardstyle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'widgets.optionrallycn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'widgets.vsoption.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coca-coladesignmachine.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cwgoption.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dyson.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.janrain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jsoption.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.minerva.kgi.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.optionrallycn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vsoption.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xmos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www31.hm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www32.hm.com'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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